• News
• Infocus
• Foundations
• Microsoft
• Unix
• IDS
• Incidents
• Virus
• Pen-Test
• Firewalls
• Columnists
• Mailing Lists
• Newsletters
• Bugtraq
• Focus on IDS
• Focus on Linux
• Focus on Microsoft
• Forensics
• Pen-test
• Security Basics
• Vuln Dev
• Vulnerabilities
• Jobs
• Job Opportunities
• Resumes
• Job Seekers
• Employers
• Tools
• RSS
• News
• Vulns
• Security Research

• info
• discussion
• exploit
• solution
• references

Smarty Template Engine 'function.math.php' Security Bypass Vulnerability

Bugtraq ID:	34918
Class:	Input Validation Error
CVE:	CVE-2009-1669
Remote:	Yes
Local:	No
Published:	May 12 2009 12:00AM
Updated:	Oct 27 2009 06:08PM
Credit:	Nine:Situations:Group::bookoo <br><br>
Vulnerable:	Ubuntu Ubuntu Linux 9.04 sparc Ubuntu Ubuntu Linux 9.04 powerpc Ubuntu Ubuntu Linux 9.04 lpia Ubuntu Ubuntu Linux 9.04 i386 Ubuntu Ubuntu Linux 9.04 amd64 Ubuntu Ubuntu Linux 8.10 sparc Ubuntu Ubuntu Linux 8.10 powerpc Ubuntu Ubuntu Linux 8.10 lpia Ubuntu Ubuntu Linux 8.10 i386 Ubuntu Ubuntu Linux 8.10 amd64 Ubuntu Ubuntu Linux 8.04 LTS sparc Ubuntu Ubuntu Linux 8.04 LTS powerpc Ubuntu Ubuntu Linux 8.04 LTS lpia Ubuntu Ubuntu Linux 8.04 LTS i386 Ubuntu Ubuntu Linux 8.04 LTS amd64 Smarty Template Engine 2.6.22 Smarty Template Engine 2.6.19 Smarty Template Engine 2.6.18 Smarty Template Engine 2.6.17 Smarty Template Engine 2.6.16 Smarty Template Engine 2.6.15 Smarty Template Engine 2.6.14 Smarty Template Engine 2.6.13 Smarty Template Engine 2.6.12 Smarty Template Engine 2.6.11 Smarty Template Engine 2.6.10 Smarty Template Engine 2.6.9 Smarty Template Engine 2.6.8 Smarty Template Engine 2.6.7 + Gentoo Linux Smarty Template Engine 2.6.6 Smarty Template Engine 2.6.5 Smarty Template Engine 2.6.4 Smarty Template Engine 2.6.3 Smarty Template Engine 2.6.2 Smarty Template Engine 2.6.1 Smarty Template Engine 2.6 Smarty Template Engine 2.6.20-1 RedHat Fedora 9 0 RedHat Fedora 10 Pardus Linux 2008 0 Debian Linux 5.0 sparc Debian Linux 5.0 s/390 Debian Linux 5.0 powerpc Debian Linux 5.0 mipsel Debian Linux 5.0 mips Debian Linux 5.0 m68k Debian Linux 5.0 ia-64 Debian Linux 5.0 ia-32 Debian Linux 5.0 hppa Debian Linux 5.0 armel Debian Linux 5.0 arm Debian Linux 5.0 amd64 Debian Linux 5.0 alpha Debian Linux 5.0 Debian Linux 4.0 sparc Debian Linux 4.0 s/390 Debian Linux 4.0 powerpc Debian Linux 4.0 mipsel Debian Linux 4.0 mips Debian Linux 4.0 m68k Debian Linux 4.0 ia-64 Debian Linux 4.0 ia-32 Debian Linux 4.0 hppa Debian Linux 4.0 armel Debian Linux 4.0 arm Debian Linux 4.0 amd64 Debian Linux 4.0 alpha Debian Linux 4.0
Not Vulnerable:	Smarty Template Engine 2.6.23