GCalendar security exploit

Susann · Posted: Mon May 31, 2010 6:04 am

I´m getting dozen of blocked e-mails daily from NukeSentinel.
So I `ll chance this behavior but I checked also my logs and found out there is an security issue with this calendar in Joomla.

Quote:

GET /*.php?option=com_gcalendar&controller=../../../../../../../../../../../../../../../proc/self/environ%00 HTTP/1.1" 403 1712 "-" "libwww-perl/5.831"

"GCalendar Suite 2.1.5 is vulnerable; other versions may also be affected. "

More information:

Only registered users can see links on this board!
Get registered or login to the forums!

nuken · Posted: Mon May 31, 2010 7:09 am

I think that is a totally different project. It is a google calendar integration into joomla.

Palbin · Posted: Mon May 31, 2010 8:46 am

I have checked and this does not affect us as far as I can tell. I couldn't find a controller or com_gcalendar variable.

Susann · Posted: Mon May 31, 2010 12:42 pm

You are right. Doesn´t affect us directly but indirectly through NukeSentinel.

Guardian2003 · Posted: Thu Jun 03, 2010 12:33 pm

Susann wrote:

You are right. Doesn´t affect us directly but indirectly through NukeSentinel.

Yes, people are probably searching Google for "GCalendar" and then trying their luck not realising it's the wrong GCalendar