- 전체
- 보안뉴스
- 제로데이취약점
- 해킹프로그래밍
- 웹해킹
- 해킹기법
- 정보보호
- 정보보안기사 - 국가기술자격
- 악성코드분석_리버싱
- 시큐어코딩_개발보안진단원
- CISSP
- CISA
- 모의해킹_penetration-test
- deepweb / tor network
- Kali Linux
제로데이취약점 XAMPP 1.8.1 (lang.php, WriteIntoLocalDisk method) - Local Write Access Vulnerability
2013.10.17 00:10
XAMPP 1.8.1 (lang.php, WriteIntoLocalDisk method) - Local Write Access Vulnerability
=============================================INTERNET SECURITY AUDITORS ALERT 2013-007- Original release date: March 14th, 2013- Last revised: March 19th, 2013- Discovered by: Manuel García Cárdenas- Severity: 6,8/10 (CVSS Base Score)- CVE-ID: CVE-2013-2586=============================================I. VULNERABILITY-------------------------XAMPP 1.8.1 Local Write Access VulnerabilityII. BACKGROUND-------------------------XAMPP is a free and open source cross-platform web server solution stackpackage, consisting mainly of the Apache HTTP Server, MySQL database, andinterpreters for scripts written in the PHP and Perl programming languages.III. DESCRIPTION-------------------------It has been detected than an unprivileged user can write in the localdisk and the local file "lang.tmp" can be modified in the remote machine.The injection is done through the page "/xampp/lang.php".IV. PROOF OF CONCEPT-------------------------Malicious Requesthttp://vulnerablesite.com/xampp/lang.php?WriteIntoLocalDiskAnd next, if we access to the file:http://vulnerablesite.com/xampp/lang.tmpWe can verify that the file was modified.V. BUSINESS IMPACT-------------------------An attacker can execute arbitrary HTML or script code in a targeteduser's browser, this can leverage to steal sensitive information as usercredentials,personal data, etc.VI. SYSTEMS AFFECTED-------------------------XAMPP 1.8.1VII. SOLUTION-------------------------All data received by the application that can be modified by the usermust be validated.VIII. REFERENCES-------------------------http://www.apachefriends.orghttp://www.isecauditors.comIX. CREDITS-------------------------This vulnerability has been discoveredby Manuel García Cárdenas (mgarcia (at) isecauditors (dot) com).X. REVISION HISTORY------------------------March 14, 2013: Initial releaseSeptember 26, 2013: Final releaseXI. DISCLOSURE TIMELINE-------------------------March 14, 2013: Vulnerability acquired by Internet SecurityAuditors (www.isecauditors.com).March 16, 2013: CVE-ID received.March 18, 2013: Sent to Development Manager.August 30, 2013: New version that includes patched code.September 26, 2013: Sent to lists.XII. LEGAL NOTICES-------------------------The information contained within this advisory is supplied "as-is" withno warranties or guarantees of fitness of use or otherwise. InternetSecurityAuditors accepts no responsibility for any damage caused by the use ormisuse of this information.XIII. ABOUT-------------------------Internet Security Auditors is a Spain based leader in web applicationtesting, network security, penetration testing, security complianceimplementation andassessing. Our clients include some of the largest companies in areassuch as finance, telecommunications, insurance, ITC, etc. We are vendorindependentprovider with a deep expertise since 2001. Our efforts in R&D includevulnerability research, open security project collaboration andwhitepapers,presentations and security events participation and promotion. Forfurther information regarding our security services, contact us.XIV. FOLLOW US-------------------------You can follow Internet Security Auditors, news and security advisories at:https://www.facebook.com/ISecAuditorshttps://twitter.com/ISecAuditorshttp://www.linkedin.com/company/internet-security-auditorshttp://www.youtube.com/user/ISecAuditors |
본 웹사이트는 광고를 포함하고 있습니다.
광고 클릭에서 발생하는 수익금은 모두 웹사이트 서버의 유지 및 관리, 그리고 기술 콘텐츠 향상을 위해 쓰여집니다.
광고 클릭에서 발생하는 수익금은 모두 웹사이트 서버의 유지 및 관리, 그리고 기술 콘텐츠 향상을 위해 쓰여집니다.
댓글 0
| 번호 | 제목 | 글쓴이 | 날짜 | 조회 수 |
|---|---|---|---|---|
| 공지 | 침투테스트(취약점검점검, 모의해킹) 문의 / 답변 | 졸리운_곰 | 2017.12.10 | 28361 |
| 15 |
[해킹 프로그래밍][화이트해커][모의해킹] DARK FANTASY HACK TOOL
 | 졸리운_곰 | 2021.04.28 | 174 |
| 14 | 코드 인젝션 | 졸리운_곰 | 2017.07.01 | 300 |
| 13 | Hacking Tools Repository | 졸리운_곰 | 2016.04.18 | 997 |
| 12 | 모의해킹을 연습할 수 있는 환경을 제공하는 사이트 | 졸리운_곰 | 2014.11.18 | 1767 |
| 11 |
AEG: Automatic Exploit Generation
| 졸리운_곰 | 2014.10.31 | 249 |
| 10 | Apache / PHP 5.x - cgi-bin Remote Code Execution Exploit | 졸리운_곰 | 2014.09.19 | 464 |
| 9 | Linux/x86 Multi-Egghunter | 졸리운_곰 | 2014.02.17 | 771 |
| 8 | Windows RT ARM Bind Shell (Port 4444) | 졸리운_곰 | 2014.02.17 | 1037 |
| 7 | Linux/x86 Reverse TCP Bind Shellcode (92 bytes) | 졸리운_곰 | 2014.02.17 | 813 |
| 6 | [ShellCode] Windows MessageBox ShellCode | 가을의 곰을... | 2013.11.19 | 1071 |
| 5 |
metaexploit 사용법 메뉴얼
| 가을의 곰을... | 2013.06.16 | 3581 |
| 4 |
쉘코드의 원리와 구현
| 가을의 곰을... | 2013.02.11 | 2938 |
| 3 | Metasploit Framework 우분투에 설치하기(Install Metasploit framework in Ubuntu) | 가을의 곰을... | 2013.02.10 | 1612 |
| 2 |
윈도우버전 Metasploit 에서 사용자 exploit 사용하는법
| 가을의 곰을... | 2013.02.10 | 2810 |
| 1 |
metaexploit 사용한 custom exploit 제작
| 가을의 곰을... | 2013.02.09 | 2526 |