[ GLSA 200501-41 ] TikiWiki: Arbitrary command execution

[GLSA]

Gentoo Linux Security Advisory

Title: TikiWiki: Arbitrary command execution (GLSA 200501-41)
Severity: high
Exploitable: remote
Date: January 30, 2005
Updated: May 22, 2006
Bug(s): #78944
ID: 200501-41

Synopsis

A bug in TikiWiki allows certain users to upload and execute malicious PHP scripts.

Background

TikiWiki is a web-based groupware and content management system (CMS), using PHP, ADOdb and Smarty.

Affected Packages

Package: www-apps/tikiwiki
Vulnerable: < 1.8.5
Unaffected: >= 1.8.5
Architectures: All supported architectures


Description

TikiWiki does not validate files uploaded to the "temp" directory.

Impact

A malicious user could run arbitrary commands on the server by uploading and calling a PHP script.

Workaround

There is no known workaround at this time.

Resolution

All TikiWiki users should upgrade to the latest version: