ActivePost Standard Traversal Arbitrary File Upload

2004-09-23T02:24:47
ID OSVDB:10234
Type osvdb
Reporter Luigi Auriemma(aluigi@autistici.org)
Modified 2004-09-23T02:24:47

Description

Vulnerability Description

ActivePost Standard contains a flaw that allows a remote attacker to upload arbitrary files outside of the web path. The issue is due to the file server not properly sanitizing user input, specifically traversal style attacks (../../) supplied via the filename variable.

Solution Description

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Short Description

ActivePost Standard contains a flaw that allows a remote attacker to upload arbitrary files outside of the web path. The issue is due to the file server not properly sanitizing user input, specifically traversal style attacks (../../) supplied via the filename variable.

References:

Vendor Specific Solution URL: http://www.activepost.net/ Security Tracker: 1011406 Secunia Advisory ID:12642 Related OSVDB ID: 10233 Related OSVDB ID: 10236 Related OSVDB ID: 10235 Other Advisory URL: http://aluigi.altervista.org/adv/actp-adv.txt Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0852.html Generic Exploit URL: http://aluigi.altervista.org/poc/actpup.zip CVE-2004-1548