Network Administration Visualized Unspecified Local Directory Traversal Vulnerability

Bugtraq ID:	20995
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 10 2006 12:00AM
Updated:	Nov 15 2006 05:11AM
Credit:	The vendor disclosed this issue.
Vulnerable:	Network Administration Visualized Network Administration Visualized 3.1
Not Vulnerable:	Network Administration Visualized Network Administration Visualized 3.1.1

Network Administration Visualized Unspecified Local Directory Traversal Vulnerability

Network Administration Visualized is prone to a local unspecified directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied data.

Exploiting this issue may allow a local attacker to access sensitive data that may aid in further attacks.

Versions prior to 3.1.1 are vulnerable to this issue.

Network Administration Visualized Unspecified Local Directory Traversal Vulnerability

An attacker can exploit this issue via a web client.

Network Administration Visualized Unspecified Local Directory Traversal Vulnerability

Solution:
The vendor has released an updated version that addresses this vulnerability. Please see the vendor references for more information.


Network Administration Visualized Network Administration Visualized 3.1

• Network Administration Visualized Network Administration Visualized version 3.1.1
  http://sourceforge.net/project/showfiles.php?group_id=107608

Network Administration Visualized Unspecified Local Directory Traversal Vulnerability

References:

• Network Administration Visualized Homepage (Network Administration Visualized)
  
• Release notes for NAV 3.1.1 (Network Administration Visualized)