httpdx dot Character Remote File Disclosure Vulnerability
BID:44141
Info
httpdx dot Character Remote File Disclosure Vulnerability
| Bugtraq ID: | 44141 |
| Class: | Input Validation Error |
| CVE: |
CVE-2009-4531 |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 09 2009 12:00AM |
| Updated: | Oct 09 2009 12:00AM |
| Credit: | Dr_IDE |
| Vulnerable: |
httpdx httpdx 1.4.5 |
| Not Vulnerable: |
httpdx httpdx 1.4.6b |
Discussion
httpdx dot Character Remote File Disclosure Vulnerability
The 'httpdx' application is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input.
An attacker can exploit this vulnerability to view the source code of files in the context of the server process. This may aid in further attacks.
Versions prior to httpdx 1.4.6b are vulnerable.
The 'httpdx' application is prone to a remote file-disclosure vulnerability because it fails to properly sanitize user-supplied input.
An attacker can exploit this vulnerability to view the source code of files in the context of the server process. This may aid in further attacks.
Versions prior to httpdx 1.4.6b are vulnerable.
Exploit / POC
httpdx dot Character Remote File Disclosure Vulnerability
Attackers can exploit this issue through a browser.
The following example URI are available:
http://www.example.com/index.html.
http://www.example.com/test.py.
http://www.example.com/test.php.
Attackers can exploit this issue through a browser.
The following example URI are available:
http://www.example.com/index.html.
http://www.example.com/test.py.
http://www.example.com/test.php.
Solution / Fix
httpdx dot Character Remote File Disclosure Vulnerability
Solution:
Updates are available. Please see the references for more information.
Solution:
Updates are available. Please see the references for more information.