Cute Editor for ASP.NET 'file' Parameter Directory Traversal Vulnerability

Bugtraq ID:	35085
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 24 2009 12:00AM
Updated:	Jan 19 2010 03:41PM
Credit:	Securitylab.ir
Vulnerable:	CuteSoft Components Cute Editor for ASP.NET 0
Not Vulnerable:	CuteSoft Components Cute Editor for ASP.NET 6.6

Cute Editor for ASP.NET 'file' Parameter Directory Traversal Vulnerability

Cute Editor for ASP.NET is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks.

Cute Editor for ASP.NET 'file' Parameter Directory Traversal Vulnerability

An attacker can exploit this issue via a browser.

The following proof-of-concept URI is available:

http://www.example.com/CuteSoft_Client/CuteEditor/Load.ashx?type=image&file=../../../web.config

Cute Editor for ASP.NET 'file' Parameter Directory Traversal Vulnerability

Solution:
Updates are available. Please see the references for details.


CuteSoft Components Cute Editor for ASP.NET 0

• CuteSoft Components Cute Editor for .NET
  http://cutesoft.net/downloads/folders/21904/download.aspx

Cute Editor for ASP.NET 'file' Parameter Directory Traversal Vulnerability

References:

• Cute Editor for ASP.NET (CuteSoft Components)