Info

Disclosure

Mar 05, 2006

Discovery

Unknown

Dates

Exploit

Mar 05, 2006

Solution

Unknown

Description

thttpd contains a flaw that may allow a malicious local user to execute privileged commands. The issue is triggered when a user calls the 'htpasswd' utility but supplies arbitrary commands along with a username to be added to a password file. It is possible that the flaw may allow the user to bypass the required authentication and execute arbitrary programs with privileged access.

Classification

Location: Local Access Required
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Public

Solution

Currently, there are no known upgrades, patches, or workarounds available to correct this issue.

Products

ACME Laboratories

thttpd

2.25b

References

Bugtraq ID: 16972
CVE ID: 2006-1078 (see also: NVD)
ISS X-Force ID: 25216 31236
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2006-02/0663.html
http://archives.neohapsis.com/archives/fulldisclosure/2004-09/0547.html
http://lists.grok.org.uk/pipermail/full-disclosure/2007-January/051562.html
http://marc.theaimsgroup.com/?l=thttpd&m=114154083000296&w=2
http://marc.theaimsgroup.com/?l=thttpd&m=114153031201867&w=2
http://seclists.org/bugtraq/2004/Oct/0359.html
Vendor Specific Solution URL: http://bugs.gentoo.org/show_bug.cgi?id=128165
Other Advisory URL: http://issues.apache.org/bugzilla/show_bug.cgi?id=31975
http://issues.apache.org/bugzilla/show_bug.cgi?id=41279
http://www.security-express.com/archives/fulldisclosure/2004-10/1117.html

Credit

Larry Cashdollar - lcashdolgmail.com - Personal Page

Direct URL: http://osvdb.org/23828