Description: rgod has discovered a vulnerability in Sugar Suite, which can be exploited by malicious people to bypass certain security restrictions and compromise a vulnerable system.
The vulnerability is caused due to various scripts in the "modules" directory incorrectly protecting against direct web access by checking the global variable "sugarEntry". This can e.g. be exploited to include arbitrary files from external and local resources by defining the "sugarEntry" parameter and other parameters.
Successful exploitation requires that "register_globals" is enabled and that support for ".htaccess" files is not enabled (the included .htaccess file requires Apache with the mod_alias module).
The vulnerability has been confirmed in version 4.2.0a. Other versions may also be affected.
Solution: Update to version 4.2.0b or later.
Provided and/or discovered by: rgod
Changelog: 2006-05-25: Added CVE reference.
2006-12-27: Updated "Solution" section.
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com.
Ideas, suggestions, and other feedback are most welcome.
