Hosting Controller FilePath Parameter File Disclosure Vulnerability
BID:11822
Info
Hosting Controller FilePath Parameter File Disclosure Vulnerability
| Bugtraq ID: | 11822 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Dec 06 2004 12:00AM |
| Updated: | Dec 06 2004 12:00AM |
| Credit: | Discovery is credited to Mouse <[email protected]>. |
| Vulnerable: |
Hosting Controller Hosting Controller 6.1 Hotfix 1.4 Hosting Controller Hosting Controller 6.1 |
| Not Vulnerable: | |
Discussion
Hosting Controller FilePath Parameter File Disclosure Vulnerability
Multiple scripts of Hosting Controller are prone to an issue which may allow a remote attacker to view the contents of arbitrary files and directories on the local drive.
It is reported that a successful attack allows an attacker to view any file or directory on the affected computer through a 'FilePath' parameter.
Hosting Controller version 6.1 Hotfix 1.4 and prior may be affected by this issue.
Multiple scripts of Hosting Controller are prone to an issue which may allow a remote attacker to view the contents of arbitrary files and directories on the local drive.
It is reported that a successful attack allows an attacker to view any file or directory on the affected computer through a 'FilePath' parameter.
Hosting Controller version 6.1 Hotfix 1.4 and prior may be affected by this issue.
Exploit / POC
Hosting Controller FilePath Parameter File Disclosure Vulnerability
An exploit is not required.
The following proof of concept is available:
http://www.example.com/admin/mail/Statsbrowse.asp?
FilePath=c:\&Opt=3&level=1&upflag=0
http://www.example.com/admin/iis/Generalbrowse.asp?FilePath=C:
An exploit is not required.
The following proof of concept is available:
http://www.example.com/admin/mail/Statsbrowse.asp?
FilePath=c:\&Opt=3&level=1&upflag=0
http://www.example.com/admin/iis/Generalbrowse.asp?FilePath=C:
Solution / Fix
Hosting Controller FilePath Parameter File Disclosure Vulnerability
Solution:
It is reported that the vendor has released a patch to address this issue. This has not been confirmed.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
It is reported that the vendor has released a patch to address this issue. This has not been confirmed.
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Hosting Controller FilePath Parameter File Disclosure Vulnerability
References:
References:
- Hosting Controller Homepage (Hosting Controller)