2 Identified potential exploits were discovered that could:
1. Enable an attacker to execute arbitrary code on a Magento server.
2. Create files with a .csv extension, create writable directories, and change the permission of existing files to world-writable (777).
Creating files with a .csv extension could lead to executing files like php.csv (only under certain circumstances). The ability to run code with a .csv extension is dangerous itself and could be combined with other attacks; for example, targeting other software installed on the server.
This vulnerability affects the following application versions:
- Magento 1.4.0.0
- Magento 1.4.0.1
- Magento 1.4.1.0
- Magento 1.4.1.1
- Magento 1.4.2.0
- Magento 1.5.0.1
- Magento 1.5.1.0
- Magento 1.6.0.0
- Magento 1.6.1.0
- Magento 1.6.2.0
- Magento 1.7.0.0
- Magento 1.7.0.1
- Magento 1.7.0.2
- Magento 1.8.0.0
- Magento 1.8.1.0
- Magento 1.9.0.0
- Magento 1.9.0.1