Xerver Directory Traversal Vulnerability

Bugtraq ID:	4255
Class:	Input Validation Error
CVE:	CVE-2002-0447
Remote:	Yes
Local:	No
Published:	Mar 08 2002 12:00AM
Updated:	Jul 11 2009 11:56AM
Credit:	Discovery of this issue is credited to Alex Hernandez <[email protected]>.
Vulnerable:	Xerver Xerver 2.10 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home
Not Vulnerable:	Xerver Xerver 2.20 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows XP Home

Xerver Directory Traversal Vulnerability

Solution:
This issue has been addressed in Xerver 2.20.


Xerver Xerver 2.10

• Xerver Xerver 2.20
  http://www.javascript.nu/xerver/

Xerver Directory Traversal Vulnerability

References:

• Xerver Homepage (Xerver)