Weborf HTTP 'modURL()' Function Directory Traversal Vulnerability

Bugtraq ID:	43016
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 07 2010 12:00AM
Updated:	Sep 16 2010 05:41PM
Credit:	Rew
Vulnerable:	Galileo Students Team Weborf 0.12.2 Galileo Students Team Weborf 0.12.1 Galileo Students Team Weborf 0.12
Not Vulnerable:	Galileo Students Team Weborf 0.12.3

Weborf HTTP 'modURL()' Function Directory Traversal Vulnerability

Weborf is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

Exploiting this issue will allow an attacker to view arbitrary local files within the context of the webserver. Information harvested may aid in launching further attacks.

Weborf 0.12.2 and prior versions are vulnerable.

Weborf HTTP 'modURL()' Function Directory Traversal Vulnerability

An attacker can exploit this issue with a web browser.

The following example URI is available:

http://www.example.com/..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd

Weborf HTTP 'modURL()' Function Directory Traversal Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

Weborf HTTP 'modURL()' Function Directory Traversal Vulnerability

References:

• Released 0.12.3 (Galileo)
  
• Weborf Homepage (Galileo Student Team)