Detections
Analytics

FreeBSD : Bugzilla -- Directory Traversal in importxml.pl (1d96305d-6ae6-11dd-91d5-000c29d47fd7)

high Nessus Plugin ID 33904

Synopsis

The remote FreeBSD host is missing one or more security-related updates.

Description

A Bugzilla Security Advisory reports :

When importing bugs using importxml.pl, the --attach_path option can be specified, pointing to the directory where attachments to import are stored. If the XML file being read by importxml.pl contains a malicious ../relative_path/to/local_file node, the script follows this relative path and attaches the local file pointed by it to the bug, making the file public. The security fix makes sure the relative path is always ignored.

Solution

Update the affected packages.

See Also

https://bugzilla.mozilla.org/show_bug.cgi?id=437169

http://www.nessus.org/u?40cf4802

Plugin Details

Severity: High

ID: 33904

File Name: freebsd_pkg_1d96305d6ae611dd91d5000c29d47fd7.nasl

Version: 1.15

Type: local

Published: 8/17/2008

Updated: 1/6/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.4

CVSS v2

Risk Factor: High

Base Score: 7.1

Vector: CVSS2#AV:N/AC:M/Au:N/C:C/I:N/A:N

Vulnerability Information

CPE: p-cpe:/a:freebsd:freebsd:ja-bugzilla, cpe:/o:freebsd:freebsd, p-cpe:/a:freebsd:freebsd:bugzilla

Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info

Patch Publication Date: 8/15/2008

Vulnerability Publication Date: 6/3/2008

Reference Information

CVE: CVE-2008-4437

CWE: 22