Detections
Analytics
FreeBSD : mantis -- php code execution vulnerability (af2745c0-c3e0-11dd-a721-0030843d3802)
high Nessus Plugin ID 35057
Synopsis
The remote FreeBSD host is missing a security-related update.Description
Secunia reports :EgiX has discovered a vulnerability in Mantis, which can be exploited by malicious users to compromise a vulnerable system.
Input passed to the 'sort' parameter in manage_proj_page.php is not properly sanitised before being used in a 'create_function()' call.
This can be exploited to execute arbitrary PHP code.
Solution
Update the affected package.See Also
Plugin Details
Severity: High
ID: 35057
File Name: freebsd_pkg_af2745c0c3e011dda7210030843d3802.nasl
Version: 1.18
Type: local
Family: FreeBSD Local Security Checks
Published: 12/8/2008
Updated: 1/6/2021
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: High
Score: 7.4
CVSS v2
Risk Factor: High
Base Score: 9
Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C
Vulnerability Information
CPE: p-cpe:/a:freebsd:freebsd:mantis, cpe:/o:freebsd:freebsd
Required KB Items: Host/local_checks_enabled, Host/FreeBSD/release, Host/FreeBSD/pkg_info
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 12/6/2008
Vulnerability Publication Date: 10/17/2008
Exploitable With
Core Impact
Metasploit (Mantis manage_proj_page PHP Code Execution)
Reference Information
CVE: CVE-2008-4687