bugweb-cyradm - Bugs: bug #11053, New security feature...

 
 

bug #11053: New security feature WC_BASE/index.php not work like it should

Submitted by:  Lukasz Marciniak <landm>
Submitted on:  Fri 19 Nov 2004 09:18:03 AM UTC  
 
Category: mainSeverity: 3 - Normal
Priority: 5 - NormalItem Group: security
Status: FixedPrivacy: Public
Assigned to: Lukasz Marciniak <landm>Originator Name: Lukasz Marciniak
Open/Closed: ClosedRelease: 0.5.4
Operating System: GNU/LinuxReproducibility: Every Time
Planned Release: 0.5.4Cyrus IMAP version: 2.2.x
PHP version: 5.0Database type: MySQL 4.0

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Fri 19 Nov 2004 10:01:34 AM UTC, comment #1:

I add a patch for all files which use this feature.

Lukasz Marciniak <landm>
Project MemberIn charge of this item.
Fri 19 Nov 2004 09:18:03 AM UTC, original submission:

If found not very nice thing with tcpdump.

When I call directly i.e. welcome.php:
GET /web-cyradm-HEAD/welcome.php HTTP/1.1
Host: 127.0.0.1
[...]
I get answer like this:
HTTP/1.1 302 Found
Date: Fri, 19 Nov 2004 08:49:34 GMT
Server: Apache/2.0.52 (Unix) PHP/5.0.2
X-Powered-By: PHP/5.0.2
Location: index.php
Content-Length: 741
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: text/html

<!-- ############################## Start browse.php ###################################### -->
[...]
<b>Notice</b>: Undefined variable: DOMAIN_AS_PREFIX in <b>/home/users/lukasz/cvs/web-cyradm-HEAD/browse.php</b> on line <b>28</b><br />
<th>
prefix </th>

<th>
max Accounts </th>

<th>
default quota per user </th>
</tr>

<br />
<
b>Fatal error</b>: Class 'DB' not found in <b>/home/users/lukasz/cvs/web-cyradm-HEAD/browse.php</b> on line <b>63</b><br />

Ofcouse then I was redirect to index.php:
GET /web-cyradm-HEAD/index.php HTTP/1.1

It ease to avoid this behavior by adding "exit();" after header("Location: index.php");

Lukasz Marciniak <landm>
Project MemberIn charge of this item.

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

Attached Files
file #2032:  all_files.diff added by landm (19KiB - application/octet-stream - Patch for security issue and undefined constant WC_BASE notice in all affected files)
file #2031:  welcome.php.diff added by landm (463B - application/octet-stream - Patch for security issue and undefined constant WC_BASE notice)

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 5 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Tue 30 Nov 2004 09:28:51 AM UTCdelouwStatusNone=>Fixed
  Assigned toNone=>landm
  Open/ClosedOpen=>Closed
Fri 19 Nov 2004 10:01:34 AM UTClandmAttached File-=>Added all_files.diff, #1894
Fri 19 Nov 2004 09:18:03 AM UTClandmAttached File-=>Added welcome.php.diff, #1893

Back to the top


Powered by Savane 3.1-cleanup1