Ravens PHP Scripts - TYPO3 rtehtmlarea Extension *userUid* Command Execution

SECUNIA ADVISORY ID: SA23466

VERIFY ADVISORY: http://secunia.com/advisories/23466/

CRITICAL: Highly critical

IMPACT: System access

SOFTWARE:
rtehtmlarea (extension for TYPO3) 0.x - http://secunia.com/product/12942/
rtehtmlarea (extension for TYPO3) 1.x - http://secunia.com/product/12943/

DESCRIPTION: Daniel Fabian and J. Greil have reported a vulnerability in the rtehtmlarea extension for TYPO3, which can be exploited by malicious people to gain system access.

The extension is affected by the vulnerability described in: SA23446. The vulnerability is reported in versions 0.7.5 to 1.4.2. Other versions may also be affected.

SOLUTION:
Update to version 1.4.3, if you run 1.4.2 or lower.
Update to version 1.3.8, if you run 1.3.7 or lower.
Update to version 1.2.1, if you run 1.2.0 or lower.
Update to version 1.1.4, if you run 1.1.3 or lower.

PROVIDED AND/OR DISCOVERED BY: Daniel Fabian and J. Greil, SEC CONSULT.

ORIGINAL ADVISORY: http://typo3.org/news-single-view/?tx_newsimporter_pi1%5BshowItem%5D=0&cHash=e4a40a11a9

OTHER REFERENCES: SA23446: http://secunia.com/advisories/23446/