A file disclosure and inclusion vulnerability exists in web/views/file.php in ZoneMinder 1.x through v1.30.0 because of unfiltered user-input being passed to readfile(), which allows an authenticated attacker to read local system files (e.g., /etc/passwd) in the context of the web server user (www-data). The attack vector is a .. (dot dot) in the path parameter within a zm/index.php?view=file&path= request.
References
| Link | Resource |
|---|---|
| http://seclists.org/bugtraq/2017/Feb/6 | Patch Third Party Advisory VDB Entry |
| http://seclists.org/fulldisclosure/2017/Feb/11 | Patch Third Party Advisory VDB Entry |
| http://www.securityfocus.com/bid/96125 | Third Party Advisory VDB Entry |
| https://github.com/ZoneMinder/ZoneMinder/commit/8b19fca9927cdec07cc9dd09bdcf2496a5ae69b3 | Patch Vendor Advisory |
| http://seclists.org/bugtraq/2017/Feb/6 | Patch Third Party Advisory VDB Entry |
| http://seclists.org/fulldisclosure/2017/Feb/11 | Patch Third Party Advisory VDB Entry |
| http://www.securityfocus.com/bid/96125 | Third Party Advisory VDB Entry |
| https://github.com/ZoneMinder/ZoneMinder/commit/8b19fca9927cdec07cc9dd09bdcf2496a5ae69b3 | Patch Vendor Advisory |
Configurations
History
21 Nov 2024, 03:27
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://seclists.org/bugtraq/2017/Feb/6 - Patch, Third Party Advisory, VDB Entry | |
| References | () http://seclists.org/fulldisclosure/2017/Feb/11 - Patch, Third Party Advisory, VDB Entry | |
| References | () http://www.securityfocus.com/bid/96125 - Third Party Advisory, VDB Entry | |
| References | () https://github.com/ZoneMinder/ZoneMinder/commit/8b19fca9927cdec07cc9dd09bdcf2496a5ae69b3 - Patch, Vendor Advisory |
Information
Published : 2017-02-06 17:59
Updated : 2024-11-21 03:27
NVD link : CVE-2017-5595
Mitre link : CVE-2017-5595
CVE.ORG link : CVE-2017-5595
JSON object : View
Products Affected
zoneminder
- zoneminder
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor