Epic Games Unreal Tournament 3 UT3 WebAdmin Directory Traversal Vulnerability
BID:31272
Info
Epic Games Unreal Tournament 3 UT3 WebAdmin Directory Traversal Vulnerability
| Bugtraq ID: | 31272 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-4243 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 21 2008 12:00AM |
| Updated: | May 07 2015 05:23PM |
| Credit: | Luigi Auriemma |
| Vulnerable: |
Epic Games UT3 WebAdmin 1.6 Epic Games UT3 WebAdmin 1.5 Epic Games UT3 WebAdmin 1.4 Epic Games UT3 WebAdmin 1.3 |
| Not Vulnerable: |
Epic Games UT3 WebAdmin 1.7 |
Discussion
Epic Games Unreal Tournament 3 UT3 WebAdmin Directory Traversal Vulnerability
UT3 WebAdmin is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input.
Exploiting this issue will allow an attacker to view arbitrary local files outside of the web root. Information harvested may aid in launching further attacks.
This issue affects UT3 WebAdmin 1.3 to 1.6.
UT3 WebAdmin is prone to a directory-traversal vulnerability because the application fails to sufficiently sanitize user-supplied input.
Exploiting this issue will allow an attacker to view arbitrary local files outside of the web root. Information harvested may aid in launching further attacks.
This issue affects UT3 WebAdmin 1.3 to 1.6.
Exploit / POC
Epic Games Unreal Tournament 3 UT3 WebAdmin Directory Traversal Vulnerability
An attacker can exploit this issue via readily available tools.
The following proof of concept is available:
GET /images/../../UTGame/Config/UTGame.INI HTTP/1.0
An attacker can exploit this issue via readily available tools.
The following proof of concept is available:
GET /images/../../UTGame/Config/UTGame.INI HTTP/1.0
Solution / Fix
Epic Games Unreal Tournament 3 UT3 WebAdmin Directory Traversal Vulnerability
Solution:
The vendor has addressed this issue in WebAdmin 1.7. Please see the references for more information.
Epic Games UT3 WebAdmin 1.5
Epic Games UT3 WebAdmin 1.4
Epic Games UT3 WebAdmin 1.6
Epic Games UT3 WebAdmin 1.3
Solution:
The vendor has addressed this issue in WebAdmin 1.7. Please see the references for more information.
Epic Games UT3 WebAdmin 1.5
-
Epic Games WebAdmin-2008-09-21.zip
http://ut3webadmin.elmuerte.com/files/WebAdmin-2008-09-21.zip
Epic Games UT3 WebAdmin 1.4
-
Epic Games WebAdmin-2008-09-21.zip
http://ut3webadmin.elmuerte.com/files/WebAdmin-2008-09-21.zip
Epic Games UT3 WebAdmin 1.6
-
Epic Games WebAdmin-2008-09-21.zip
http://ut3webadmin.elmuerte.com/files/WebAdmin-2008-09-21.zip
Epic Games UT3 WebAdmin 1.3
-
Epic Games WebAdmin-2008-09-21.zip
http://ut3webadmin.elmuerte.com/files/WebAdmin-2008-09-21.zip
References
Epic Games Unreal Tournament 3 UT3 WebAdmin Directory Traversal Vulnerability
References:
References:
- Unreal Tournament 3 (Luigi Auriemma)
- UT3 WebAdmin (Epic Games)
- UT3 WebAdmin 1.7 Changelog (Epic Games)
- Directory traversal in the webadmin of Unreal Tournament 3 1.3 (Luigi Auriemma
)