TorrentFlux Dir.PHP Directory Traversal Vulnerability
BID:20771
Info
TorrentFlux Dir.PHP Directory Traversal Vulnerability
| Bugtraq ID: | 20771 |
| Class: | Input Validation Error |
| CVE: |
CVE-2006-5609 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 27 2006 12:00AM |
| Updated: | Jul 05 2007 09:17PM |
| Credit: | Christopher <[email protected]> is credited with the discovery of this vulnerability. |
| Vulnerable: |
TorrentFlux TorrentFlux 2.1 |
| Not Vulnerable: | |
Discussion
TorrentFlux Dir.PHP Directory Traversal Vulnerability
TorrentFlux is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input.
An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid attackers in further attacks.
TorrentFlux 2.1 is reported vulnerable; other versions may be affected as well.
TorrentFlux is prone to a directory-traversal vulnerability because the application fails to properly sanitize user-supplied input.
An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the affected application. Information obtained may aid attackers in further attacks.
TorrentFlux 2.1 is reported vulnerable; other versions may be affected as well.
Exploit / POC
TorrentFlux Dir.PHP Directory Traversal Vulnerability
Attackers can exploit this issue via a web client.
An example URI that returns the directory listings for '/etc' is as follows:
http://www.example.com/torrentfluxroot/dir.php?dir=\.\./\.\./\.\./etc/
Attackers can exploit this issue via a web client.
An example URI that returns the directory listings for '/etc' is as follows:
http://www.example.com/torrentfluxroot/dir.php?dir=\.\./\.\./\.\./etc/
Solution / Fix
TorrentFlux Dir.PHP Directory Traversal Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].
References
TorrentFlux Dir.PHP Directory Traversal Vulnerability
References:
References:
- TorrentFlux Homepage (TorrentFlux)
- Directory Traversal in TorrentFlux 2.1 (Christopher