httpdx Space Character Remote File Disclosure Vulnerability
BID:37586
Info
httpdx Space Character Remote File Disclosure Vulnerability
| Bugtraq ID: | 37586 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 04 2010 12:00AM |
| Updated: | Jan 05 2010 04:42PM |
| Credit: | Securitylab.ir |
| Vulnerable: |
httpdx httpdx 1.5 |
| Not Vulnerable: | |
Discussion
httpdx Space Character Remote File Disclosure Vulnerability
The 'httpdx' application is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input.
An attacker can exploit this vulnerability to view the source code of files in the context of the server process. This may aid in further attacks.
This issue affects httpdx 1.5; other versions may be vulnerable as well.
The 'httpdx' application is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input.
An attacker can exploit this vulnerability to view the source code of files in the context of the server process. This may aid in further attacks.
This issue affects httpdx 1.5; other versions may be vulnerable as well.
Exploit / POC
httpdx Space Character Remote File Disclosure Vulnerability
Attackers can exploit this issue via a browser.
The following example URI is available:
http://www.example.com/file.php%20
Attackers can exploit this issue via a browser.
The following example URI is available:
http://www.example.com/file.php%20
Solution / Fix
httpdx Space Character Remote File Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
httpdx Space Character Remote File Disclosure Vulnerability
References:
References: