USP FOSS Distribution Download.PHP Directory Traversal Vulnerability

Bugtraq ID:	23632
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 24 2007 12:00AM
Updated:	Apr 18 2008 12:29AM
Credit:	GolD_M is credited with the discovery of this vulnerability.
Vulnerable:	USP FOSS Distribution USP FOSS Distribution 1.01
Not Vulnerable:	USP FOSS Distribution USP FOSS Distribution 2

USP FOSS Distribution Download.PHP Directory Traversal Vulnerability

USP FOSS Distribution is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.

A remote attacker can exploit this issue to retrieve the contents of arbitrary files in the context of the webserver process.

This issue affects USP FOSS Distribution 1.01; other versions may also be affected.

USP FOSS Distribution Download.PHP Directory Traversal Vulnerability

Attackers can use a browser to exploit this issue.

The following proof-of-concept URI is available:

http://example.com/user/download.php?dnld=../../../../../../etc/passwd

USP FOSS Distribution Download.PHP Directory Traversal Vulnerability

Solution:
This issue is addressed in USP FOSS Distribution 2.

USP FOSS Distribution Download.PHP Directory Traversal Vulnerability

References:

• USP FOSS Distribution Homepage (USP FOSS Distribution )