HP Secure Web Server for Tru64 UNIX XMLRPC Bug Lets Remote Users Execute Arbitrary PHP Code
|
|
SecurityTracker Alert ID: 1015336
|
|
SecurityTracker URL: http://securitytracker.com/id?1015336
|
|
CVE Reference: CVE-2005-1921
(Links to External Site)
|
Date: Dec 9 2005
|
Impact: Execution of arbitrary code via network, User access via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Advisory: HP Security Bulletin
|
Version(s): 6.4.1 and prior versions
|
Description: A vulnerability was reported in HP's Secure Web Server for Tru64 UNIX when running PHP/XMLRPC. A remote user can execute arbitrary code on the target system.
The parseRequest() function in PHPXMLRPC does not properly validate user-supplied input before making an eval() call. A remote user
can create a specially crafted XML file and submit the file in an HTTP POST request to execute arbitrary PHP code on the target
system.
The underlying vulnerability, which resides in XML-RPC for PHP, was reported in June 2005 [Alert ID 1014327] and was
discovered by James from GulfTech Security Research.
|
Impact: A remote user can execute arbitrary code on the target system.
|
Solution: HP has issued a fixed version (Secure Web Server 6.4.1a for Tru64 UNIX).
Kit Location: http://h30097.www3.hp.com/internet/download.htm
Kit
File: sws_v6_4_1a.tar.gz
Kit MD5 Checksum: 3000048bb9e39b02e95628741f62e37b
The vendor's advisory is available at:
http://www2.itrc.hp.com/service/cki/docDisplay
.do?docId=c00576921
|
Vendor URL: www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00576921 (Links to External Site)
|
Cause: Input validation error
|
Underlying OS: UNIX (Tru64)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Fri, 9 Dec 2005 14:07:21 -0500
Subject: HPSBTU02083 SSRT051069 - HP Tru64 Unix Secure Web Server (SWS 6.4.1 and earlier) PHP/XMLRPC Remote Unauthorized
|
http://www2.itrc.hp.com/service/cki/docDisplay.do?docId=c00576921
CVE-2005-1921
|
|
