NeroNet Limited Directory Traversal Vulnerability

Bugtraq ID:	15288
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Nov 02 2005 12:00AM
Updated:	Nov 02 2005 12:00AM
Credit:	[email protected] is credited with the discovery of this vulnerability.
Vulnerable:	Nero NeroNET 1.2 .0.2
Not Vulnerable:

NeroNet Limited Directory Traversal Vulnerability

NeroNet is prone to a directory traversal vulnerability.

Reports indicate that this product can allow remote unauthorized attackers to view arbitrary files in the context of the application.

Exploitation of this vulnerability could lead to a loss of confidentiality. Information obtained may aid in further attacks against the underlying computer.

It is reported that NeroNET versions 1.2.0.2 and earlier are vulnerable.

NeroNet Limited Directory Traversal Vulnerability

An exploit is not required.

NeroNet Limited Directory Traversal Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

NeroNet Limited Directory Traversal Vulnerability

References:

• NeroNET Web Site (NeroNET)
  
• [Full-disclosure] Limited directory traversal in NeroNET 1.2.0.2 (Luigi Auriemma )