Mambo Site Server Arbitrary File Upload Vulnerability

Threat level definition

Mambo Site Server Arbitrary File Upload Vulnerability

Solution:
The vendor has confirmed the issue and has released a patch for version <= 4.0.11. Users of version 4.0.12-BETA are advised to apply the appropriate patches via CVS. This issue is also addressed in Mambo 4.0.12 BETA 2.

Mambo Mambo Site Server 4.0.10

Mambo Security_Patch_307.tar.gz
http://www.mamboserver.com/Security_Patch_307.tar.gz

Mambo MamboV4012-BETA-2.tar.gz
http://freshmeat.net/redir/mambo/15020/url_tgz/MamboV4012-BETA-2.tar.g z

Mambo Mambo Site Server 4.0.11

Mambo Security_Patch_307.tar.gz
http://www.mamboserver.com/Security_Patch_307.tar.gz

Mambo MamboV4012-BETA-2.tar.gz
http://freshmeat.net/redir/mambo/15020/url_tgz/MamboV4012-BETA-2.tar.g z

Mambo Mambo Site Server 4.0.12 BETA

Mambo MamboV4012-BETA-2.tar.gz
http://freshmeat.net/redir/mambo/15020/url_tgz/MamboV4012-BETA-2.tar.g z

Privacy Statement
Copyright 2009, SecurityFocus