National Cyber Awareness System

Vulnerability Summary for CVE-2006-2060

Overview

Directory traversal vulnerability in action_admin/paysubscriptions.php in Invision Power Board (IPB) 2.1.x and 2.0.x before 20060425 allows remote authenticated administrators to include and execute arbitrary local PHP files via a .. (dot dot) in the name parameter, preceded by enough backspace (%08) characters to erase the initial static portion of a filename.

Impact

CVSS Severity (version 2.0 upgrade from v1.0):

CVSS Version 2 Metrics:

Solution

If you've downloaded IPB 2.1.5 since the time of this post, there is no need to update your installation as the main download has been updated.}

References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

External Source: CONFIRM

Name: http://forums.invisionpower.com/index.php?showtopic=213374

Type: Patch Information

Hyperlink:http://forums.invisionpower.com/index.php?showtopic=213374

External Source: VUPEN

Name: ADV-2006-1534

Hyperlink:http://www.vupen.com/english/advisories/2006/1534

External Source: BUGTRAQ

Name: 20060425 Invision Vulnerabilities, including remote code execution

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/431990/100/0/threaded

External Source: XF

Name: invision-admin-file-include(26072)

Hyperlink:http://xforce.iss.net/xforce/xfdb/26072

External Source: BUGTRAQ

Name: 20060710 Re: RE: Invision Vulnerabilities, including remote code execution

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/439607/100/0/threaded

External Source: BUGTRAQ

Name: 20060427 Re: Invision Vulnerabilities, including remote code execution

Hyperlink:http://www.securityfocus.com/archive/1/archive/1/432226/100/0/threaded

External Source: OSVDB

Name: 25008

Hyperlink:http://www.osvdb.org/25008

External Source: SREASON

Name: 796

Hyperlink:http://securityreason.com/securityalert/796

External Source: SECUNIA

Name: 19830

Hyperlink:http://secunia.com/advisories/19830