Detections
Analytics
Debian DSA-1720-1 : typo3-src - several vulnerabilities
medium Nessus Plugin ID 35638
Synopsis
The remote Debian host is missing a security-related update.Description
Several remote vulnerabilities have been discovered in the TYPO3 web content management framework.Marcus Krause and Michael Stucki from the TYPO3 security team discovered that the jumpUrl mechanism discloses secret hashes enabling a remote attacker to bypass access control by submitting the correct value as a URL parameter and thus being able to read the content of arbitrary files.
Jelmer de Hen and Dmitry Dulepov discovered multiple cross-site scripting vulnerabilities in the backend user interface allowing remote attackers to inject arbitrary web script or HTML.
As it is very likely that your encryption key has been exposed we strongly recommend to change your encryption key via the install tool after installing the update.
Solution
Upgrade the typo3 package.For the stable distribution (etch) these problems have been fixed in version 4.0.2+debian-8.
See Also
Plugin Details
Severity: Medium
ID: 35638
File Name: debian_DSA-1720.nasl
Version: 1.20
Type: local
Agent: unix
Family: Debian Local Security Checks
Published: 2/12/2009
Updated: 1/4/2021
Supported Sensors: Agentless Assessment, Frictionless Assessment Agent, Nessus Agent, Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.2
CVSS v2
Risk Factor: Medium
Base Score: 5
Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N
Vulnerability Information
CPE: p-cpe:/a:debian:debian_linux:typo3-src, cpe:/o:debian:debian_linux:4.0
Required KB Items: Host/local_checks_enabled, Host/Debian/release, Host/Debian/dpkg-l
Exploit Available: true
Exploit Ease: Exploits are available
Patch Publication Date: 2/10/2009
Vulnerability Publication Date: 3/4/2009
Exploitable With
Elliot (Typo3 FD)
Reference Information
CVE: CVE-2009-0815, CVE-2009-0816