GNUBoard gbupdate.php file upload
| gnuboard-gbupdate-file-upload (18729) |  Medium Risk |
Description:
GNUBoard could allow a remote attacker to upload malicious PHP files, caused by a vulnerability in the gbupdate.php script. A remote attacker could create a specially-crafted file that contains capital letters in the file extension, which would allow the attacker to upload the malicious file to the vulnerable system.
Platforms Affected:
- SIR, GNUBoard 3.40 and prior
Remedy:
Upgrade to the latest version of GNUBoard (3.40 or later), available from the GNUBoard Web site. See References.
Consequences:
Gain Access
References:
- BugTraq Mailing List, Mon Jan 03 2005 - 01:42:02 CST , File extensions restriction bypass vulnerability in GNUBoard at http://archives.neohapsis.com/archives/bugtraq/2005-01/0003.html.
- GNUBoard Web site, SIR at http://www.sir.co.kr/.
- BID-12149: SIR GNUBoard File Upload Extension Restriction Bypass Vulnerability
- CVE-2005-0269: The file extension check in GNUBoard 3.40 and earlier only verifies extensions that contain all lowercase letters, which allows remote attackers to upload arbitrary files via file extensions that include uppercase letters.
- SA13711: GNUBoard File Upload Vulnerability
Reported:
Jan 03, 2005
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
Copyright (c) 1994-2008 Internet Security Systems, Inc. All rights reserved worldwide.
For corrections or additions please email xforce@iss.net