Namad 'SecureDownloads.aspx' Arbitrary File Download Vulnerability

Bugtraq ID:	35026
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 19 2009 12:00AM
Updated:	May 21 2009 01:21AM
Credit:	Securitylab.ir
Vulnerable:	ImenAfzar Namad 2.0 0
Not Vulnerable:

Namad 'SecureDownloads.aspx' Arbitrary File Download Vulnerability

Namad is prone to a vulnerability that lets attackers download arbitrary files. The issue occurs because the application fails to sufficiently sanitize user-supplied input.

Exploiting this issue will allow an attacker to view arbitrary files within the context of the application. Information harvested may aid in launching further attacks.

Namad 2.0.0.0 is vulnerable; other versions may also be affected.

Namad 'SecureDownloads.aspx' Arbitrary File Download Vulnerability

An attacker can exploit this issue via a browser.

The following example URI is available:

http://www.example.com/SecureDownloads.aspx?Mode=Downloads&Type=Files&FileName=../../Web.Config

Namad 'SecureDownloads.aspx' Arbitrary File Download Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Namad 'SecureDownloads.aspx' Arbitrary File Download Vulnerability

References:

• Vendor Homepage (Imen Afzar)
  
• Namad Cms Remote File Download ([email protected])