{"vuid":"VU#845747","idnumber":"845747","name":"PTK contains multiple vulnerabilities","keywords":["VU#845747 ptk","PTK","lab","ptk"],"overview":"The PTK sleuthkit interface contains multiple vulnerabilities. If exploited, these vulnerabilities may allow an attacker to gain elevated privileges or conduct XSS attacks.","clean_desc":"PTK is an interface to the sleuthkit forensic tools that uses Apache, PHP and MySQL. PTK versions 1.0.0 to 1.0.4 contain multiple vulnerabilities. These vulnerabilities may be triggered remotely or during the inspection of local HTML files that are rendered in web browsers.","impact":"A remote unauthenticated attacker may be able to execute arbitrary javascript or run commands in the context of the Apache web server.","resolution":"Upgrade Users and administrators are encouraged to update to the most recent version of PTK.","workarounds":"Do not connect PTK to untrusted networks Systems running PTK should not be directly or indirectly (proxies, firewalls, etc) connected to the Internet or other untrusted networks. See the PTK security page for more information about running PTK and best practice network configurations. Note that XSS and other vulnerabilities could be triggered by local files, so this workaround is not likely to be effective in all cases. Secure web browser configurations Using secure browser configurations may mitigate these and future vulnerabilities.. See the Securing Your Web Browser document for more information.","sysaffected":"","thanks":"Thanks to Gabriele Zanoni (Secure Network Srl, g.zanoni@securenetwork.it) for reporting this issue, and thanks to DFLabs for providing technical information.","author":"This document was written by Ryan Giobbi.","public":["http://ptk.dflabs.com/security.html","http://www.cert.org/tech_tips/securing_browser/"],"cveids":[""],"certadvisory":"","uscerttechnicalalert":null,"datecreated":"2009-01-26T13:31:32Z","publicdate":"2009-03-13T00:00:00Z","datefirstpublished":"2009-03-13T12:16:20Z","dateupdated":"2009-03-13T14:47:04Z","revision":51,"vrda_d1_directreport":"1","vrda_d1_population":"1","vrda_d1_impact":"3","cam_widelyknown":"5","cam_exploitation":"0","cam_internetinfrastructure":"0","cam_population":"4","cam_impact":"10","cam_easeofexploitation":"15","cam_attackeraccessrequired":"10","cam_scorecurrent":"0.5625","cam_scorecurrentwidelyknown":"2.25","cam_scorecurrentwidelyknownexploited":"4.5","ipprotocol":"tcp","cvss_accessvector":"--","cvss_accesscomplexity":"--","cvss_authentication":null,"cvss_confidentialityimpact":"--","cvss_integrityimpact":"--","cvss_availabilityimpact":"--","cvss_exploitablity":null,"cvss_remediationlevel":"Not Defined (ND)","cvss_reportconfidence":"Not Defined (ND)","cvss_collateraldamagepotential":"Not Defined (ND)","cvss_targetdistribution":"Not Defined (ND)","cvss_securityrequirementscr":"Not Defined (ND)","cvss_securityrequirementsir":"Not Defined (ND)","cvss_securityrequirementsar":"Not Defined (ND)","cvss_basescore":"0","cvss_basevector":"AV:--/AC:--/Au:--/C:--/I:--/A:--","cvss_temporalscore":"0","cvss_environmentalscore":"0","cvss_environmentalvector":"CDP:Not Defined (ND)/TD:Not Defined (ND)/CR:Not Defined (ND)/IR:Not Defined (ND)/AR:Not Defined (ND)","metric":0.5625,"vulnote":null}