Xedus Web Server Multiple Vulnerabilities
BID:11071
Info
Xedus Web Server Multiple Vulnerabilities
| Bugtraq ID: | 11071 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Aug 30 2004 12:00AM |
| Updated: | Aug 30 2004 12:00AM |
| Credit: | James Bercegay of the GulfTech Security Research Team reported these vulnerabilities. |
| Vulnerable: |
Jerod Moemeka Xedus 1.0 |
| Not Vulnerable: | |
Discussion
Xedus Web Server Multiple Vulnerabilities
It is reported that Xedus is susceptible to multiple vulnerabilities.
The first reported issue is a denial of service vulnerability. The affected application is unable to service multiple simultaneous connections, denying access to the hosted site for legitimate users.
The second reported issue is a cross-site scripting vulnerability in included sample scripts. This vulnerability is due to a failure of the application to properly sanitize user-supplied URI input before including it in the output of the scripts.
The third reported issue is a directory traversal vulnerability. The affected application will reportedly serve documents located outside of the configured web root. This may allow an attacker the ability to read arbitrary, potentially sensitive files on the hosting computer with the privileges of the web server. This may aid malicious users in further attacks.
These vulnerabilities are reported to exist in version 1.0 of Xedus.
It is reported that Xedus is susceptible to multiple vulnerabilities.
The first reported issue is a denial of service vulnerability. The affected application is unable to service multiple simultaneous connections, denying access to the hosted site for legitimate users.
The second reported issue is a cross-site scripting vulnerability in included sample scripts. This vulnerability is due to a failure of the application to properly sanitize user-supplied URI input before including it in the output of the scripts.
The third reported issue is a directory traversal vulnerability. The affected application will reportedly serve documents located outside of the configured web root. This may allow an attacker the ability to read arbitrary, potentially sensitive files on the hosting computer with the privileges of the web server. This may aid malicious users in further attacks.
These vulnerabilities are reported to exist in version 1.0 of Xedus.
Exploit / POC
Xedus Web Server Multiple Vulnerabilities
An exploit is not required, however examples were provided:
For the cross-site scripting vulnerabilities:
http://www.example.com:4274/test.x?username=[XSS]
http://www.example.com:4274/TestServer.x?username=[XSS]
http://www.example.com:4274/testgetrequest.x?param=[XSS]
For the directory traversal vulnerability:
http://www.example.com:4274/../data/log.txt
http://www.example.com:4274/../../../../../boot.ini
An exploit is not required, however examples were provided:
For the cross-site scripting vulnerabilities:
http://www.example.com:4274/test.x?username=[XSS]
http://www.example.com:4274/TestServer.x?username=[XSS]
http://www.example.com:4274/testgetrequest.x?param=[XSS]
For the directory traversal vulnerability:
http://www.example.com:4274/../data/log.txt
http://www.example.com:4274/../../../../../boot.ini
Solution / Fix
Xedus Web Server Multiple Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Xedus Web Server Multiple Vulnerabilities
References:
References:
- Product Home Page (Jerod Moemeka)
- Multiple Vulnerabilities in Xedus Webserver ("GulfTech Security"