SecurityFocus BUGTRAQ Mailing List: BugTraqLink Number One Link Number One Link 
Number Two Link Number Two  Link Number One Link Number One Link Number Two Link 
Number Two   
                          Entire Site Advisories Calendar Columnists Elsewhere 
                          Guest Feature Infocus Library Links Mailing Lists 
                          (all) -- BUGTRAQ -- FOCUS-IDS -- FOCUS-IH -- 
                          FOCUS-LINUX -- FOCUS-MS -- FOCUS-SUN -- FOCUS-VIRUS -- 
                          FORENSICS -- INCIDENTS -- PEN-TEST -- SEC JOBS -- SF 
                          NEWS -- VULN-DEV News Products Services Tools Vulns








             
             




                         BUGTRAQ ARCHIVE 

                        [ Message Index ] [ Thread Index ][ Reply ]
                        [ prev Msg by Date ][ next Msg by Date ]


                              To: BugTraq
                              Subject: MondoSoft File Creation vulnerability
                              Date: Sep 24 2003 7:38AM
                              Author: Jens H. Christensen <jhc protego dk>
                              Message-ID: <000501c3826e$cdb91c60$2464a8c0@jhc>


PROTEGO Security Advisory #PSA200302 
Topic: MondoSoft File Creation vulnerability
Application : MondoSearch 4.4, 5.0, and 5.1
Author: Jens H. Christensen (jhc at protego.dk)
Advisory URL: http://www.protego.dk/advisories/200302.html
Identifiers: CERT: VU# 756556
Vendor Name: MondoSoft 
Vendor URL: http://www.mondosoft.com
Vendor contacted: 15-Sep-2003
Public release: 24-Sep-2003

Problem:
MondoSearch is web site search engine made by MondoSoft.

MsmSetup.exe is one of the programs in the default installation.
This program contains a vulnerability that makes it possible to create
files with user specified content on the webserver or anywhere else,
where the executing user (typically IUSR_xxx) has write access.

Details:
The vulnerability occurs when the Msmsetup.exe is called with a
specially crafted querystring.

Impact:
It is possible for a malicious user to, create and execute arbitrary ASP
code on the server. This could in turn, lead to a full compromise of the
server. 

Corrective actions:
MondoSoft has released a patch for this issue.
http://www.mondosoft.com/security 

Disclaimer:
The information within this document may change without notice. Use of
this information constitutes acceptance for use in an "AS IS" condition.
There are NO warranties with regard to this information. In no event
shall PROTEGO be liable for any consequences or damages, including
direct, indirect, incidental, consequential, loss of business profits or
special damages, arising out of or in connection with the use or spread
of this information. Any use of this information lies within the user's
responsibility. All registered and unregistered trademarks represented
in this document are the sole property of their respective owners. 







                  Want to link to this message? Use this URL: 
                  <http://www.securityfocus.com/archive/1/338826>
                  Disclaimer, Terms & Conditions


                  About this List


                  Featured Lists:

                  ARIS Users
                  bugtraq
                  bugtraq-es
                  bugtraq-french NEW
                  bugtraq-jp
                  firewalls
                  focus-ids
                  focus-ih
                  focus-linux
                  focus-ms
                  focus-sun
                  focus-unix-other
                  focus-virus
                  forensics
                  forensics-es
                  honeypots
                  incidents
                  libnet
                  pen-test
                  secevents
                  secpapers
                  secprog
                  sectools
                  secureshell
                  security-basics
                  security-management NEW
                  securityjobs
                  vpn
                  vuln-dev
                  webappsec

                  Newsletters:

                  sf-news
                  ms-secnews
                  linux-secnews


                  [ more . . . ]




                        Privacy Statement
                        Copyright © 1999-2003 SecurityFocus