Vulnerability CVE-2008-2717

Vulnerability Name:

CVE-2008-2717 (CCN-42988)

Assigned:

2008-06-11

Published:

2008-06-11

Updated:

2018-10-11

Summary:

TYPO3 4.0.x before 4.0.9, 4.1.x before 4.1.7, and 4.2.x before 4.2.1, uses an insufficiently restrictive default fileDenyPattern for Apache, which allows remote attackers to bypass security restrictions and upload configuration files such as .htaccess, or conduct file upload attacks using multiple extensions.

CVSS v3 Severity:

4.6 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:L)

Exploitability Metrics:	Attack Vector (AV): Network Attack Complexity (AC): High Privileges Required (PR): Low User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): Low Integrity (I): Low Availibility (A): Low

CVSS v2 Severity:

6.5 Medium (CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P)
4.8 Medium (Temporal CVSS v2 Vector: AV:N/AC:L/Au:S/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Low Authentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

6.0 Medium (CCN CVSS v2 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P)
4.4 Medium (CCN Temporal CVSS v2 Vector: AV:N/AC:M/Au:S/C:P/I:P/A:P/E:U/RL:OF/RC:C)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

Vulnerability Type:

CWE-264

Vulnerability Consequences:

Gain Access

References:

Source: CONFIRM
Type: UNKNOWN
http://buzz.typo3.org/teams/security/article/advice-on-core-security-issue-regarding-filedenypattern/

Source: MITRE
Type: CNA
CVE-2008-2717

Source: CCN
Type: SA30619
TYPO3 File Upload and Cross-Site Scripting Vulnerabilities

Source: SECUNIA
Type: Vendor Advisory
30619

Source: SECUNIA
Type: Vendor Advisory
30660

Source: SREASON
Type: UNKNOWN
3945

Source: CCN
Type: TYPO3-20080611-1
Multiple vulnerabilities in TYPO3 Core

Source: CONFIRM
Type: UNKNOWN
http://typo3.org/teams/security/security-bulletins/typo3-20080611-1/

Source: DEBIAN
Type: UNKNOWN
DSA-1596

Source: DEBIAN
Type: DSA-1596
typo3 -- several vulnerabilities

Source: CCN
Type: OSVDB ID: 46285
TYPO3 on Apache Crafted Filename Upload Arbitrary Command Execution

Source: BUGTRAQ
Type: UNKNOWN
20080611 TYPO3 Security Bulletin TYPO3-20080611-1: Multiple vulnerabilities in TYPO3 Core

Source: BID
Type: UNKNOWN
29657

Source: CCN
Type: BID-29657
TYPO3 Cross-Site Scripting Vulnerability and File Upload Vulnerability

Source: VUPEN
Type: UNKNOWN
ADV-2008-1802

Source: XF
Type: UNKNOWN
typo3-filename-file-upload(42988)

Source: XF
Type: UNKNOWN
typo3-filename-file-upload(42988)

Vulnerable Configuration:

Configuration 1:

cpe:/a:apache:apache_webserver:*:*:*:*:*:*:*:*

OR cpe:/a:typo3:typo3:4.0:*:*:*:*:*:*:*

OR cpe:/a:typo3:typo3:4.0.1:*:*:*:*:*:*:*

OR cpe:/a:typo3:typo3:4.0.2:*:*:*:*:*:*:*

OR cpe:/a:typo3:typo3:4.0.3:*:*:*:*:*:*:*

OR cpe:/a:typo3:typo3:4.0.4:*:*:*:*:*:*:*

OR cpe:/a:typo3:typo3:4.0.5:*:*:*:*:*:*:*

OR cpe:/a:typo3:typo3:4.0.6:*:*:*:*:*:*:*

OR cpe:/a:typo3:typo3:4.0.7:*:*:*:*:*:*:*

OR cpe:/a:typo3:typo3:4.0.8:*:*:*:*:*:*:*

OR cpe:/a:typo3:typo3:4.1:*:*:*:*:*:*:*

OR cpe:/a:typo3:typo3:4.1.1:*:*:*:*:*:*:*

OR cpe:/a:typo3:typo3:4.1.2:*:*:*:*:*:*:*

OR cpe:/a:typo3:typo3:4.1.3:*:*:*:*:*:*:*

OR cpe:/a:typo3:typo3:4.1.4:*:*:*:*:*:*:*

OR cpe:/a:typo3:typo3:4.1.5:*:*:*:*:*:*:*

OR cpe:/a:typo3:typo3:4.1.6:*:*:*:*:*:*:*

OR cpe:/a:typo3:typo3:4.2:*:*:*:*:*:*:*

Configuration CCN 1:

cpe:/a:typo3:typo3:3.0:*:*:*:*:*:*:*