Yaws Remote Source Code Disclosure Vulnerability

Bugtraq ID:	13981
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 17 2005 12:00AM
Updated:	Jun 17 2005 12:00AM
Credit:	Discovery is credited to Daniel Fabian <[email protected]>.
Vulnerable:	Yaws Yaws 1.55 Yaws Yaws 1.54 Yaws Yaws 1.52 Yaws Yaws 1.51 Yaws Yaws 1.50
Not Vulnerable:

Yaws Remote Source Code Disclosure Vulnerability

A vulnerability has been reported in Yaws that may result in the disclosure of script files' source code.

Information obtained in this manner may be used by the attacker to launch further attacks against a vulnerable system.

Yaws 1.55 and prior versions are affected.

Yaws Remote Source Code Disclosure Vulnerability

An exploit is not required.

The following proof of concept is available:
http://www.example.com/dynamic.yaws%00

Yaws Remote Source Code Disclosure Vulnerability

Solution:
The vendor has released a patch to address this issue.


Yaws Yaws 1.50

• Yaws yaws-1.55_to_1.56.patch
  http://yaws.hyber.org/yaws-1.55_to_1.56.patch

Yaws Yaws 1.51

• Yaws yaws-1.55_to_1.56.patch
  http://yaws.hyber.org/yaws-1.55_to_1.56.patch

Yaws Yaws 1.52

• Yaws yaws-1.55_to_1.56.patch
  http://yaws.hyber.org/yaws-1.55_to_1.56.patch

Yaws Yaws 1.54

• Yaws yaws-1.55_to_1.56.patch
  http://yaws.hyber.org/yaws-1.55_to_1.56.patch

Yaws Yaws 1.55

• Yaws yaws-1.55_to_1.56.patch
  http://yaws.hyber.org/yaws-1.55_to_1.56.patch

Yaws Remote Source Code Disclosure Vulnerability

References:

• Yaws Homepage (Yaws)
  
• Source Code Disclosure in Yaws Webserver <1.56 ("Daniel Fabian" )