full-disclosure - Re: ClipBucket v2.6-r738 Arbitrary File Upload 0-Day

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [day] [month] [year] [list]

Message-ID: <20131116083309.GB27635@kludge.henri.nerv.fi>
Date: Sat, 16 Nov 2013 10:33:09 +0200
From: Henri Salo <henri@...v.fi>
To: Rob Whitney <xnite@...te.org>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: ClipBucket v2.6-r738 Arbitrary File Upload
 0-Day

On Sat, Nov 16, 2013 at 12:53:38AM -0600, Rob Whitney wrote:
> This vulnerability was actually discovered after a client's website was
> hacked by a group spreading a Pro-Islamic message. Here is a redacted
> version of the access log at the point of exploitation.

Disclosure date 2009-10-19
http://osvdb.org/show/osvdb/59051

A lot of software using that piece of code are still vulnerable. Especially
plugins/modules. Also lot of attacks on-going using this in my honeypots
(AS29422). Attacks are not verifying software version numbers or existence of
the software. They just attack with all payloads and hope that some sites get
infected. I have been actively sending abuse-reports of those and notified
several project upstreams about the vulnerability. You can contact me off the
list if you are interested to get more information.

---
Henri Salo

Download attachment "signature.asc" of type "application/pgp-signature" (199 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/