Aldo's Web Server Multiple Input Validation Vulnerabilities

Bugtraq ID:	10262
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 03 2004 12:00AM
Updated:	May 03 2004 12:00AM
Credit:	Oliver Karow <[email protected]> is credited for discovering these vulnerabilities.
Vulnerable:	Aldo's Web Server 1.5
Not Vulnerable:

Aldo's Web Server Multiple Input Validation Vulnerabilities

Two vulnerabilities have been reported in the Aldo's Web Server product.

A remote attacker could possibly learn information about the running web server process, and a directory traversal vulnerability is also reported, allowing an attacker to access information outside of the web server's document root.

These vulnerabilities could be used to access sensitive information that could aid an attacker in further compromises of the affected server.

Aldo's Web Server Multiple Input Validation Vulnerabilities

No exploit is required.

Aldo's Web Server Multiple Input Validation Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Aldo's Web Server Multiple Input Validation Vulnerabilities

References:

• Vendor Home Page (Aldo's Tools)
  
• Multible_Vulnerabilites_in_Aldos_Webserver ()