Sony VAIO Media Integrated Server Unspecified Directory Traversal Vulnerability

Bugtraq ID:	19560
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 16 2006 12:00AM
Updated:	Aug 17 2006 08:10PM
Credit:	This issue was discovered by Pentest Limited.
Vulnerable:	Sony VAIO Media Integrated Server 5 Sony VAIO Media Integrated Server 4
Not Vulnerable:

Sony VAIO Media Integrated Server Unspecified Directory Traversal Vulnerability

Sony VAIO Media Integrated Server is prone to an unspecified directory-traversal vulnerability. This issue is most likely due to a failure in the application to properly sanitize user-supplied input.

The exact nature of this vulnerability is not currently known; this BID will be updated as more information becomes available.

Sony VAIO Media Integrated Server Unspecified Directory Traversal Vulnerability

An exploit is not required.

Sony VAIO Media Integrated Server Unspecified Directory Traversal Vulnerability

Solution:
The vendor has released an advisory to address this issue. Please see the referenced advisory for more information.

Sony VAIO Media Integrated Server Unspecified Directory Traversal Vulnerability

References:

• Buffer overflow creates a vulnerability in VAIO Media Server. (Sony)
  
• Multiple critical vulnerabilities affecting Sony VAIO Media Integrated Server (Pentest Limited)
  
• Vendor Homepage (Sony)