AOH :: HP Unsorted A :: TB13383.HTM

AutoIndex <= 2.2.2 Cross Site Scripting and Denial of Service



AutoIndex <= 2.2.2 Cross Site Scripting and Denial of Service
AutoIndex <= 2.2.2 Cross Site Scripting and Denial of Service



=====================================================================AutoIndex <= 2.2.2 Cross Site Scripting and Denial of Service
=====================================================================
Author:          L4teral 
Impact:          Cross Site Scripting
                 Denial of Service (DoS)
Status:          patch available


------------------------------
Affected software description:
------------------------------

Application:     AutoIndex
Version:         <= 2.2.2/2.2.3
Vendor: http://autoindex.sourceforge.net 


--------------
Vulnerability:
--------------

1.
The variable $_SERVER['PHP_SELF'] is not properly sanitized
leading to cross site scripting.

2.
The use of unsanitized user input causes an error in the recursive
calculation of the size of a directory leading to cpu time/memory
consumption until the process gets killed.


------------
PoC/Exploit:
------------

1.
 

2.
http:///AutoIndex/index.php?dir=%00 


---------
Solution:
---------

update to version 2.2.4.


---------
Timeline:
---------

2007-11-05 - vendor informed
2007-11-05 - vendor released version 2.2.3 (fixing XSS)
2007-11-09 - vendor released version 2.2.4 (fixing DoS)
2007-11-12 - public disclosure

The entire AOH site is optimized to look best in Firefox® 3 on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2014 AOH
We do not send spam. If you have received spam bearing an artofhacking.com email address, please forward it with full headers to abuse@artofhacking.com.