HTTP: Kietu hit.php Remote File Include

This signature detects attempts to exploit a known vulnerability against Kietu. Kietu versions 2.0 and 2.3 are vulnerable. Attackers can exploit hit.php to include PHP code from a remote host and execute arbitrary commands.

Extended Description

Kietu may permit remote attackers to specify the include path for a configuration file. An attacker may exploit this to include a malicious PHP script from a remote host, resulting in execution of arbitrary commands with the privileges of the webserver process.

Affected Products

Kietu kietu

References

BugTraq: 6863

URL: http://securityvulns.com/docs4103.html http://secunia.com/product/1101/

Short Name

HTTP:PHP:KIETU-HIT-INCLUDE

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Kietu hit.php Remote File Include

Extended Description

Affected Products

References

Found a potential security threat?