Info

Disclosure

Sep 23, 2004

Discovery

Unknown

Dates

Exploit

Sep 23, 2004

Solution

Unknown

Description

ActivePost Standard contains a flaw that allows a remote attacker to upload arbitrary files outside of the web path. The issue is due to the file server not properly sanitizing user input, specifically traversal style attacks (../../) supplied via the filename variable.

Classification

Location: Remote/Network Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Available
OSVDB: Best Practice

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

ONNURI INFOTEK Co	ActivePost Standard	3.1
		3.0
		2.5

References

Security Tracker: 1011406
Related OSVDB ID: 10233 10235 10236
Secunia Advisory ID: 12642
CVE ID: 2004-1548 (see also: NVD)
Other Advisory URL: http://aluigi.altervista.org/adv/actp-adv.txt
Generic Exploit URL: http://aluigi.altervista.org/poc/actpup.zip
Mail List Post: http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0852.html
Vendor Specific Solution URL: http://www.activepost.net/

Credit

Luigi Auriemma - aluigiautistici.org - http://aluigi.altervista.org

Direct URL: http://osvdb.org/36218

Info

Disclosure

Discovery

Dates

Exploit

Solution

Description

Classification

Solution

Products

ONNURI INFOTEK Co

ActivePost Standard

References

Credit