Executive brief
The mylog script, a legacy PHP-based tool used for web logging, contains a security flaw that allows unauthorized users to view any file on the host server. This could lead to the exposure of sensitive system configuration files, passwords, or customer data. An attacker can exploit this remotely without needing any login credentials, potentially compromising the entire server's integrity and confidentiality.
Technical details
The PHP mylog script is vulnerable to an arbitrary file disclosure vulnerability, likely due to insufficient validation of user-supplied input used in file system operations. A remote, unauthenticated attacker can exploit this by sending a specially crafted HTTP request to the script, specifying the path of a file they wish to read (such as /etc/passwd). This allows for the retrieval of sensitive information from the server's filesystem. The vulnerability is exploited over the network via the CGI interface and does not require user interaction.
Affected products
- PHP mylog script
Timeline
- 1997-10-19: disclosed: Initial publication date in NVD