bugtraq - [VulnDiscuss] re: II-Labs Advisory: Remote code execution in YaBBse 1.5.2 (php version)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <Law15-F22idcDjoYAPN000106c6@hotmail.com>
Date: Sun, 11 May 2003 01:51:20 +0200
From: "Frog Man" <leseulfrog@...mail.com>
To: bugtraq@...urityfocus.com, vulnwatch@...nwatch.org
Subject: [VulnDiscuss] re:  II-Labs Advisory: Remote code execution in YaBBse 1.5.2 (php version)


A message has been published on BugTraq by DownBload 
(http://www.securityfocus.com/archive/1/320997/2003-05-07/2003-05-13/0) 
about an include vulnerabilty in Yabb SE 1.5.2 (the last version).

This solution :
-----------------------------------------------------------------------------------------------

======[ Solution

Add this line before include_once() lines mentioned above.

----cut here----
if (!isset($sourcedir)) $sourcedir = "";
----cut here----

-----------------------------------------------------------------------------------------------
doesn't change anything for the security.
A good solution could be :

--------------------------------------------------------------
if (file_exists($sourcedir.'/Errors.php')){
include_once ($sourcedir . '/Errors.php');
include_once ($sourcedir . '/Subs.php');
include_once ($sourcedir . '/Load.php');
}else{
die("Bad path.");
}
--------------------------------------------------------------


A patch will be (I hope :)) soon downloadable on http://www.phpsecure.info
The author of this message, a friend, has been alerted.

frog-m@n

_________________________________________________________________