Info

Disclosure

Jun 04, 2005

Discovery

May 29, 2005

Dates

Exploit

Jun 04, 2005

Solution

Unknown

Description

YaPiG contains a flaw that allows an authenticated user to create and delete arbitrary directories outside of the gallery directory. The issue is due to the upload.php script not properly sanitizing user input, specifically traversal style attacks (../../) supplied via the dir variable.

Classification

Location: Local Access Required, Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public
OSVDB: Web Related

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

NaTaSaB	YaPiG	0.92.2
		0.93
		0.94

References

Security Tracker: 1014103
Bugtraq ID: 13877
Secunia Advisory ID: 15600
Related OSVDB ID: 17115 17116 17117 17118 17119 17121
CVE ID: 2005-1884 (see also: NVD)
Other Advisory URL: http://secwatch.org/advisories/secwatch/20050530_yapig.txt
Vendor URL: http://yapig.sourceforge.net/

Credit

Unknown or Incomplete

Direct URL: http://osvdb.org/17120

Info

Disclosure

Discovery

Dates

Exploit

Solution

Description

Classification

Solution

Products

NaTaSaB

YaPiG

References

Credit