Published: 14/01/2011 Updated: 22/01/2011

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 760

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x up to and including 1.3.5 and 1.2.8 allows remote malicious users to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by the unserialize function, as demonstrated by modifying the file_map cache to execute arbitrary local files.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cakefoundation cakephp 1.3.0
cakefoundation cakephp 1.3.4
cakefoundation cakephp 1.3.5
cakefoundation cakephp 1.2.8
cakefoundation cakephp 1.3.2
cakefoundation cakephp 1.3.3
cakefoundation cakephp 1.3
cakefoundation cakephp 1.3.1

Debian Bug report logs - #606386 CVE-2010-4335 Package: cakephp; Maintainer for cakephp is Dmitry Smirnov <onlyjob@debianorg>; Source for cakephp is src:cakephp (PTS, buildd, popcon) Reported by: Moritz Muehlenhoff <jmm@debianorg> Date: Wed, 8 Dec 2010 20:21:05 UTC Severity: grave Tags: patch, security Fixed in ...

Source: securityreasoncom/securityalert/8026 CakePHP <= 135 / 128 unserialize() Vulnerability felix |at| mallocim =========================================================================== ==== Overview: "CakePHP is a rapid development framework for PHP that provides an extensible architecture for developing, maintaining, and ...

## # $Id: cakephp_cache_corruptionrb 11579 2011-01-14 16:25:37Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/cor ...

CWE-20 http://www.osvdb.org/69352 http://malloc.im/CakePHP-unserialize.txt http://packetstormsecurity.org/files/view/95847/burnedcake.py.txt https://github.com/cakephp/cakephp/commit/e431e86aa4301ced4273dc7919b59362cbb353cb http://secunia.com/advisories/42211 http://securityreason.com/securityalert/8026 http://www.exploit-db.com/exploits/16011 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=606386 https://nvd.nist.gov https://www.exploit-db.com/exploits/16011/

CVE-2010-4335

Vulnerability Summary

Vendor Advisories

Exploits

References

Vulmon Search

About

Products

Connect