Mambo "mosConfig_absolute_path" Remote File Inclusion Vulnerability

[TJ]

Technical Description

A vulnerability has been identified in Mambo, which may be exploited by attackers to execute arbitrary commands. This flaw is due to an error in the "register_globals" emulation layer in "globals.php" that does not perform safety checks on certain values, which may be exploited by remote attackers to include malicious files via the "mosConfig_absolute_path" parameter and execute arbitrary commands with the privileges of the web server.

Affected Products

Mambo version 4.5.2.3 and prior

Solution

No official supplied patch for this issue.

References

http://www.frsirt.com/english/advisories/2005/2473
http://www.frsirt.com/english/reference/931