Ganglia Clustering Environment Web Client Lets Remote Users Execute Arbitrary Commands on the Server
|
|
SecurityTracker Alert ID: 1003376
|
|
SecurityTracker URL: http://securitytracker.com/id?1003376
|
|
CVE Reference: CVE-2002-2104
(Links to External Site)
|
Updated: May 20 2008
|
Original Entry Date: Jan 27 2002
|
Impact: Execution of arbitrary code via network, User access via network
|
Fix Available: Yes
Vendor Confirmed: Yes
|
Version(s): 1.0.1
|
Description: A vulnerability was reported in the Ganglia clustering environment PHP RRD web client. A remote user can cause commands to be executed by the web server.
It is reported that graph.php allows remote users to specify a command to be passed to the passthru() function, as in the following
URL:
http://[targethost]/graph.php?graph=foo&command=whoami
The vendor credits Peter Vreugdenhil
with finding this security hole.
|
Impact: A remote user can execute arbitrary code on the server. The code will be executed with the privileges of the web server.
|
Solution: The vendor has released a fixed verison (1.0.2), available at:
http://sourceforge.net/project/showfiles.php?group_id=43021&release_id=71661
|
Vendor URL: ganglia.sourceforge.net/ (Links to External Site)
|
Cause: Input validation error
|
Underlying OS: Linux (Any), UNIX (Any)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Sun, 27 Jan 2002 14:04:14 -0500
Subject: Ganglia PHP RRD Web Client Remote Command Execution Vulnerability
|
Ganglia PHP RRD Web Client
Release Name: 1.0.2
Notes:
Changes: Fixed a HUGE security hole in "graph.php" which allows remote
users to specify a command to be passed to the passthru() function e.g.
http://my.server.com/graph.php?graph=foo&command=whoami Special thanks
to Peter Vreugdenhil for finding this security hole. Also, in version
1.0.1 when gmond didn't respond ganglia-rrd.pl would intensionally die.
v1.0.2 of ganglia-rrd.pl now sleep waits until the gmond comes back up.
Lastly, the ganglia-rrd.pl daemon will not save data for hosts which
have not sent data on the ganglia cluster multicast channel during the
time threshold.
http://sourceforge.net/project/showfiles.php?group_id=43021&release_id=71661
|
|
