html2ps 'include file' Server Side Include Directive Directory Traversal Vulnerability

Bugtraq ID:	36524
Class:	Input Validation Error
CVE:	CVE-2009-5067
Remote:	Yes
Local:	No
Published:	Sep 25 2009 12:00AM
Updated:	Apr 09 2013 10:28AM
Credit:	epiphant
Vulnerable:	Red Hat Fedora 12 Red Hat Fedora 11 Mandriva Linux Mandrake 2011 x86_64 Mandriva Linux Mandrake 2011 html2ps html2ps 1.0 b6 + S.u.S.E. Linux 8.1 + S.u.S.E. Linux 8.0 i386 + S.u.S.E. Linux 8.0 + S.u.S.E. Linux 7.3 sparc + S.u.S.E. Linux 7.3 ppc + S.u.S.E. Linux 7.3 i386 + S.u.S.E. Linux 7.3 html2ps html2ps 1.0 b5 + S.u.S.E. Linux 8.1 + S.u.S.E. Linux 8.0 i386 + S.u.S.E. Linux 8.0 + S.u.S.E. Linux 7.3 sparc + S.u.S.E. Linux 7.3 ppc + S.u.S.E. Linux 7.3 i386 + S.u.S.E. Linux 7.3 html2ps html2ps 1.0 b3 + S.u.S.E. Linux 8.1 + S.u.S.E. Linux 8.0 i386 + S.u.S.E. Linux 8.0 i386 + S.u.S.E. Linux 8.0 + S.u.S.E. Linux 8.0 + S.u.S.E. Linux 7.3 sparc + S.u.S.E. Linux 7.3 sparc + S.u.S.E. Linux 7.3 ppc + S.u.S.E. Linux 7.3 ppc + S.u.S.E. Linux 7.3 i386 + S.u.S.E. Linux 7.3 i386 + S.u.S.E. Linux 7.3 + S.u.S.E. Linux 7.3 html2ps html2ps 1.0 b2 html2ps html2ps 1.0 B1 + S.u.S.E. Linux 7.2 i386 + S.u.S.E. Linux 7.2 + S.u.S.E. Linux 7.2 + S.u.S.E. Linux 7.1 sparc + S.u.S.E. Linux 7.1 sparc + S.u.S.E. Linux 7.1 ppc + S.u.S.E. Linux 7.1 ppc + S.u.S.E. Linux 7.1 alpha + S.u.S.E. Linux 7.1 alpha + S.u.S.E. Linux 7.1 + S.u.S.E. Linux 7.1 + S.u.S.E. Linux 7.0 sparc + S.u.S.E. Linux 7.0 sparc + S.u.S.E. Linux 7.0 ppc + S.u.S.E. Linux 7.0 ppc + S.u.S.E. Linux 7.0 i386 + S.u.S.E. Linux 7.0 i386 + S.u.S.E. Linux 7.0 alpha + S.u.S.E. Linux 7.0 alpha + S.u.S.E. Linux 7.0 + S.u.S.E. Linux 7.0

Not Vulnerable:	html2ps html2ps 1.0 b7 + S.u.S.E. Linux 8.1 + S.u.S.E. Linux 8.0 i386 + S.u.S.E. Linux 8.0 + S.u.S.E. Linux 7.3 sparc + S.u.S.E. Linux 7.3 ppc + S.u.S.E. Linux 7.3 i386 + S.u.S.E. Linux 7.3