geshi up to 1.0.7.22 geshi.php resource management

Summaryinfo

A vulnerability classified as problematic has been found in geshi. This affects an unknown part of the file geshi.php. Performing a manipulation results in resource management. This vulnerability is known as CVE-2008-5185. Furthermore, an exploit is available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability classified as problematic has been found in geshi. This affects some unknown processing of the file geshi.php. The manipulation with an unknown input leads to a resource management vulnerability. CWE is classifying the issue as CWE-399. This is going to have an impact on availability. The summary by CVE is:

The highlighting functionality in geshi.php in GeSHi before 1.0.8 allows remote attackers to cause a denial of service (infinite loop) via an XML sequence containing an opening delimiter without a closing delimiter, as demonstrated using "<".

The weakness was published 11/20/2008 by Christian Hoffmann (Website). It is possible to read the advisory at openwall.com. This vulnerability is uniquely identified as CVE-2008-5185 since 11/20/2008. The exploitability is told to be easy. It is possible to initiate the attack remotely. No form of authentication is needed for exploitation. Technical details and a public exploit are known.

The exploit is shared for download at exploit-db.com. It is declared as proof-of-concept. By approaching the search of inurl:geshi.php it is possible to find vulnerable targets with Google Hacking.

Upgrading to version 1.0.2 eliminates this vulnerability.

The vulnerability is also documented in the databases at X-Force (46769), Exploit-DB (32596) and SecurityFocus (BID 32377†). Similar entry is available at VDB-45136. Be aware that VulDB is the high quality source for vulnerability data.

Productinfo

Name

• geshi

Version

• 1.0.0
• 1.0.1
• 1.0.2
• 1.0.2 Beta 1
• 1.0.3
• 1.0.4
• 1.0.5
• 1.0.6
• 1.0.7
• 1.0.7.1
• 1.0.7.2
• 1.0.7.3
• 1.0.7.4
• 1.0.7.5
• 1.0.7.6
• 1.0.7.7
• 1.0.7.8
• 1.0.7.9
• 1.0.7.10
• 1.0.7.11
• 1.0.7.12
• 1.0.7.13
• 1.0.7.14
• 1.0.7.15
• 1.0.7.16
• 1.0.7.17
• 1.0.7.18
• 1.0.7.19
• 1.0.7.20
• 1.0.7.21
• 1.0.7.22

CPE 2.3info

• 🔍
• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍
• 🔍

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Be aware that VulDB is the high quality source for vulnerability data.

Discussion