mailing list archives
Re: Re: [Full-disclosure] File Disclosure in SimpleMachines Forum <= 2.0.3
From: Kurt Seifried <kseifried () redhat com>
Date: Tue, 08 Jan 2013 17:28:32 -0700
-----BEGIN PGP SIGNED MESSAGE-----
On 01/08/2013 12:16 PM, WHK Yan wrote:
The type and range of user defined smf, a co-manager can be created
by an administrator setting custom permissions, does not mean it
comes by default. Anyway in some groups smf computer security using
caution and have had this in our case was a very dangerous.
I apologize but I am having a heck of a time parsing that last
sentence. If you want to send it in your native language I can
probably get it translated from another Red Hat employee.
2013/1/8 Kurt Seifried <kseifried () redhat com
<mailto:kseifried () redhat com>>
On 01/08/2013 06:36 AM, WHK Yan wrote:
The flaw is not exploitable without privileges. On some
occasions there are forums where there are co-admistrators which
have privileges to view the error log but not to modify code or
at least read the mysql connection.
So is a trust/security boundary crossed here? Can you please
confirm that the co-admistrator (or anyone) is not supposed to be
able to read arbitrary files accessible to the web server, and that
this attack does indeed allow that? Thanks.
Removing full-disclosure () lists grok org uk
<mailto:full-disclosure () lists grok org uk> from CC due to reply
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
-----END PGP SIGNATURE-----