HTTP: Siteman User Database Privilege Escalation

This signature detects an attempt to exploit a privilege escalation vulnerability in the "users.php" script, which is shipped as part of Siteman 1.1.x. An authorized user, can gain elevated privileges by supplying a malformed HTTP POST request to this script.

Extended Description

Siteman is reported prone to a vulnerability that may allow users to gain elevated privileges. This issue results from insufficient sanitization of user-supplied data. Apparently, an attacker can supply additional lines to the stream used to write to the user database file through a URI parameter. This can allow the attacker to corrupt the user database file and potentially gain administrative privileges to the Siteman application. Siteman 1.1.10 and prior versions are affected by this vulnerability.

Affected Products

Siteman siteman

References

BugTraq: 12304

URL: http://www.securityfocus.com/archive/1/387855 http://www.securiteam.com/unixfocus/5XP0C2KEKY.html http://sitem.sourceforge.net/

Short Name

HTTP:PHP:SITEMAN-USER

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: Siteman User Database Privilege Escalation

Extended Description

Affected Products

References

Found a potential security threat?