com_jpack 1.0.4a2

[gustavo]

Original release date:  4/19/2007
Last revised: 4/19/2007
Source: US-CERT/NIST

Overview
PHP remote file inclusion vulnerability in includes/CAltInstaller.php in the JoomlaPack (com_jpack) 1.0.4a2 RE component for Joomla! allows remote attackers to execute arbitrary PHP code via a URL in the mosConfig_absolute_path parameter.


Impact
CVSS Severity: 7.0 (High)
Range: Remotely exploitable
Authentication: Not required to exploit
Impact Type: Provides unauthorized access, Allows partial confidentiality, integrity, and availability violation


References to Advisories, Solutions, and Tools

External Source:  MILW0RM (disclaimer)

Name: 3753

Hyperlink: http://www.milw0rm.com/exploits/3753


External Source:  FRSIRT (disclaimer)

Name: ADV-2007-1429

Type:  Advisory
Hyperlink: http://www.frsirt.com/english/advisories/2007/1429


Vulnerable software and versions
JoomlaPack, JoomlaPack, 1.0.4a2 RE


Technical Details
CVSS Base Score Vector: (AV:R/AC:L/Au:NR/C:P/I:P/A:P/B:N) (legend)

Vulnerability Type: Input Validation Error


CVE Standard Vulnerability Entry:
http://cve.mitre.org/cgi-bin/cvename.cg ... -2007-2144


Common Platform Enumeration:
http://nvd.nist.gov/cpe.cfm?cvename=CVE-2007-2144

[ot2sen]

Developer notified and they will produce a new security audited release within the next days.

[alexhokamp]

@ot2sen

Any News on the Status of this Component?

Alex ...

[schipperijn]

I have just find version 1.0.4a3
Do not know if this is already with an update for this security fix

His website is at http://sledge81.freehostia.com/ with a lot good info.

This version does have more functions and looks good   :-*

[ot2sen]

@ot2sen

Any News on the Status of this Component?

Developer just confirmed that a new release 1.0.4-b1 is ready for download.
Extension republished at Joomla! Extensions Directory:
http://extensions.joomla.org/component/ ... Itemid,35/