#VU45384 Permissions, Privileges, and Access Controls in Smarty


Published: 2011-02-03 | Updated: 2020-08-11

Vulnerability identifier: #VU45384

Vulnerability risk: High

CVSSv3.1: 8.5 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:U/RL:O/RC:C]

CVE-ID: CVE-2010-4723

CWE-ID: CWE-264

Exploitation vector: Network

Exploit availability: No

Vulnerable software:
Smarty
Web applications / CMS

Vendor: smarty.php.net

Description

The vulnerability allows a remote non-authenticated attacker to execute arbitrary code.

Smarty before 3.0.0, when security is enabled, does not prevent access to the (1) dynamic and (2) private object members of an assigned object, which has unspecified impact and remote attack vectors.

Mitigation
Install update from vendor's website.

Vulnerable software versions

Smarty: 1.0 - 1.0a, 1.1.0, 1.2.0 - 1.2.2, 1.3.0 - 1.3.2, 1.4.0 - 1.4.6, 1.5.0 - 1.5.2, 2.0.0 - 2.0.1, 2.1.0 - 2.1.1, 2.2.0, 2.3.0 - 2.3.1, 2.4.0 - 2.4.2, 2.5.0, 2.6.0 - 2.6.26, 3.0.0


External links
http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt


Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote non-authenticated attacker via the Internet.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.


Latest bulletins with this vulnerability