[SA34553] ContentKeeper Web Multiple Vulnerabilities

----------------------------------------------------------------------

Secunia is pleased to announce the release of the annual Secunia
report for 2008.

Highlights from the 2008 report:
* Vulnerability Research
* Software Inspection Results
* Secunia Research Highlights
* Secunia Advisory Statistics

Request the full 2008 Report here:
http://secunia.com/advisories/try_vi/request_2008_report/

Stay Secure,

Secunia

----------------------------------------------------------------------

TITLE:
ContentKeeper Web Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA34553

VERIFY ADVISORY:
http://secunia.com/advisories/34553/

DESCRIPTION:
Patrick Webster has reported some vulnerabilities in ContentKeeper
Web, which can be exploited by malicious, local users to gain
escalated privileges, and by malicious people to disclose sensitive
information or compromise a vulnerable system.

1) An error in the setuid "benetool" binary can be exploited to
execute arbitrary commands with root privileges by setting a
specially crafted PATH environment variable.

2) Input passed via the web interface to the "cgi-bin/ck/mimencode"
application is not properly sanitised before being used to read
files. This can be exploited to read arbitrary files from local
resources via directory traversal attacks.

3) The "cgi-bin/ck/mimencode" application accepts command-line
arguments passed via HTTP requests to the administrative web
interface. This can be exploited to write arbitrary data to arbitrary
files and execute arbitrary commands on an affected system.

The vulnerabilities are reported in versions prior to 125.10.

SOLUTION:
Update to version 125.10 or later.

PROVIDED AND/OR DISCOVERED BY:
Patrick Webster

ORIGINAL ADVISORY:
http://www.aushack.com/200904-contentkeeper.txt

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=wz.bluesnow.secunia%40blogger.com

----------------------------------------------------------------------