SecurityReporter file.cgi name security bypass
| securityreporter-name-security-bypass (35591) |  Low Risk |
Description:
SecurityReporter could allow a remote attacker to bypass security restrictions, caused by a vulnerability in the file.cgi script. An attacker could exploit this vulnerability using the application directory in the name parameter to security restrictions.
Platforms Affected:
- SecureComputing, SecurityReporter 4.6.3
Remedy:
Upgrade to the latest patch for SecurityReporter, available from the Secure Computing Web site. See References.
Consequences:
Bypass Security
References:
- Full-Disclosure Mailing List, Mon Jul 23 2007 - 02:55:47 CDT, Secure Computing - Security Reporter Auth Bypass and Directory Traversal Vulnerability at http://archives.neohapsis.com/archives/fulldisclosure/2007-07/0474.html.
- Secure Computing Web site, Patches and Upgrades: Secure Computing at http://www.securecomputing.com/index.cfm?skey=246.
- BID-25027: SecurityReporter Directory Traversal Vulnerability And Authentication Bypass Vulnerability
- CVE-2007-3986: file.cgi in Secure Computing SecurityReporter (aka Network Security Analyzer) 4.6.3 allows remote attackers to bypass authentication via a name parameter that specifies the eventcache directory and a non-GIF file, which causes the $dontvalidate variable to be set to true. NOTE: a separate traversal vulnerability could be leveraged to download arbitrary files.
- SA26167: SecurityReporter "name" Directory Traversal
Reported:
Jul 23, 2007
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net