|CVSS SCORE||8.5, (AV:N/AC:M/Au:S/C:C/I:C/A:C)|
|TIPPINGPOINT™ IPS CUSTOMER PROTECTION||TippingPoint IPS customers are protected against this vulnerability by Digital Vaccine protection filter ID 19858. For further product information on the TippingPoint IPS: http://www.tippingpoint.com|
The specific flaw exists within the admin_messages.php file which relies on mimetypes and file extensions to block potentially dangerous file uploads. An attacker can exploit this condition to upload arbitrary files as the apache user. Due to loose sudo restrictions, an attacker can add the setuid attribute and execute arbitrary code under the context of root.
Symantec has issued an update to correct this vulnerability. More details can be found at:
|CREDIT||Jos Wetzels - LeakFree Security