AOLserver Directory Traversal Vulnerability

Bugtraq ID:	2343
Class:	Input Validation Error
CVE:	CVE-2001-0205
Remote:	Yes
Local:	Yes
Published:	Feb 06 2001 12:00AM
Updated:	Jul 11 2009 04:46AM
Credit:	Discovered and posted to Bugtraq by <[email protected]> on Feb 6, 2001.
Vulnerable:	AOL AOLserver 3.2 Win32 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0
Not Vulnerable:	AOL AOLserver 3.4 Win32 AOL AOLserver 3.3 Win32

AOLserver Directory Traversal Vulnerability

It is possible for a remote user to gain read access to directories outside the root directory of an AOLserver. Requesting a specially crafted URL composed of '.../' sequences will disclose an arbitrary directory.

AOLserver Directory Traversal Vulnerability

The following example has been provided by <[email protected]>:

http://target/.../[file outside web root]

AOLserver Directory Traversal Vulnerability

Solution:
Fixed version available: