CVE-2008-2041

Related Files

Gentoo Linux Security Advisory 200805-4

Posted May 8, 2008

Authored by Gentoo | Site security.gentoo.org

Gentoo Linux Security Advisory GLSA 200805-04 - A vulnerability has been reported in FCKEditor due to the way that file uploads are handled in the file editor/filemanager/upload/php/upload.php when a filename has multiple file extensions (CVE-2008-2041). Another vulnerability exists in the _bad_protocol_once() function in the file phpgwapi/inc/class.kses.inc.php, which allows remote attackers to bypass HTML filtering (CVE-2008-1502). Versions less than 1.4.004 are affected.

tags | advisory, remote, php, file upload

systems | linux, gentoo

advisories | CVE-2008-1502, CVE-2008-2041

SHA-256 | 63852d21463be551da25c5039c1326ae79dcc6b1b3c3d0e17184432653a0e712

Download | Favorite | View