Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [thread-next>] [day] [month] [year] [list]
Date: Wed, 14 Aug 2013 19:26:15 +0300
From: Henri Salo <>
Subject: CVE request: TYPO3 remote code execution by arbitrary file creation

Can we assign CVE for remote code execution by arbitrary file creation
vulnerability in TYPO3, thanks.
Advisory ID: TYPO3-CORE-SA-2013-002
Vulnerable subcomponent: Backend File Upload / File Abstraction Layer
Vulnerability Type: Remote Code Execution by arbitrary file creation
Affected Versions: All versions from 6.0.0 up to the development branch of 6.2
Severity: Critical
Suggested CVSS v2.0: AV:N/AC:L/Au:S/C:C/I:C/A:C/E:F/RL:O/RC:C

Problem Description: The file upload component and the File Abstraction Layer
are failing to check for denied file extensions, which allows authenticated
editors (even with limited permissions) to upload php files with arbitrary code,
which can then be executed in web server's context.

Solution: Update to the TYPO3 version 6.0.8 or 6.1.3 that fix the problem

Credits: Credits go to Sebastian Nerz who discovered and reported the issue.

Please note that XSS issue in the advisory already has CVE. TYPO3 team also
verified that this hasn't been requested already.

Henri Salo

Download attachment "signature.asc" of type "application/pgp-signature" (199 bytes)

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.