Secunia

Choi Min-sung has discovered a vulnerability in Zeroboard, which can be exploited by malicious people to compromise a vulnerable system.

The vulnerability is caused due to an error in restricting the uploading of files with the ".htaccess" filename. This can be exploited to upload a malicious ".htaccess" file that uses the "AddType" directive to cause the Apache web server to execute files with arbitrary extensions as PHP scripts.

Successful exploitation requires that the "mod_mime" module is installed and that the web directory has been configured with "AllowOverride All" or "AllowOverride FileInfo".

The vulnerability has been confirmed in version 4.1 pl8 (Traditional Chinese version). Other versions may also be affected.

Solution
Edit the source code to prevent the uploading of ".htaccess" file.

Provided and/or discovered by
Choi Min-sung

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area