|
FCKeditor File Upload Vulnerability
|
|
Secunia Advisory:
|
SA18767
|
|
|
Release Date:
|
2006-02-10
|
|
Last Update:
|
2006-06-02
|
|
Popularity:
|
10,083 views
|
|
|
Critical:
|
Moderately critical
|
|
Impact:
|
System access
|
|
Where:
|
From remote
|
|
Solution Status:
|
Vendor Patch
|
|
| Software: | FCKeditor 2.x
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2006-0658
|
|
Description:
rgod has discovered a vulnerability in FCKeditor, which potentially can be exploited by malicious people to compromise a vulnerable system.
The problem is that it is possible to upload arbitrary files to a location inside the web root if the file extension does not match the list of denied file extensions. This can e.g. be exploited to upload and execute a malicious PHP script with the ".php.txt" file extension.
Successful exploitation requires that file uploads have been enabled in the "config.php" configuration file (not enabled by default).
The vulnerability has been confirmed in version 2.2 and has also been reported in version 2.0. Other versions may also be affected.
Solution:
The vulnerability has been fixed in the SVN repository and will be fixed in the upcoming 2.3 version.
Provided and/or discovered by:
rgod
Changelog:
2006-02-16: Added CVE reference.
2006-05-19: Updated advisory.
2006-06-02: Updated "Solution" section.
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
