Detections
Analytics
NOCC <= 1.0 Multiple Vulnerabilities
high Nessus Plugin ID 20974
Language:
Synopsis
The remote web server contains a PHP application that is affected by multiple vulnerabilities.Description
The remote host is running NOCC, an open source webmail application written in PHP.The installed version of NOCC is affected by a local file include flaw because it fails to sanitize user input to the 'lang' parameter of the 'index.php' script before using it to include other PHP files. Regardless of PHP's 'register_globals' and 'magic_quotes_gpc' settings, an unauthenticated attacker can leverage this issue to view arbitrary files on the remote host and possibly to execute arbitrary PHP code in files on the affected host.
In addition, NOCC reportedly is affected by several other local and remote file include, cross-site scripting, and information disclosure vulnerabilities.
Solution
Unknown at this time.See Also
http://retrogod.altervista.org/noccw_10_incl_xpl.html
https://www.securityfocus.com/archive/1/425889/30/0/threaded
Plugin Details
Severity: High
ID: 20974
File Name: nocc_10.nasl
Version: 1.23
Type: remote
Family: CGI abuses
Published: 2/25/2006
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 6.3
CVSS v2
Risk Factor: High
Base Score: 7.5
Temporal Score: 7.1
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P
Vulnerability Information
CPE: cpe:/a:nocc:nocc
Required KB Items: www/PHP
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Available: true
Exploit Ease: Exploits are available
Exploited by Nessus: true
Vulnerability Publication Date: 2/23/2006
Reference Information
CVE: CVE-2006-0891, CVE-2006-0892, CVE-2006-0893, CVE-2006-0894, CVE-2006-0895
BID: 16793