XtreamerPro Directory Traversal Vulnerability and Authentication-Bypass Vulnerabilities

Bugtraq ID:	47880
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	May 16 2011 12:00AM
Updated:	May 16 2011 12:00AM
Credit:	Itzik Chen
Vulnerable:	Xtreamer XtreamerPro 0
Not Vulnerable:

XtreamerPro Directory Traversal Vulnerability and Authentication-Bypass Vulnerabilities

XtreamerPro is prone to a directory-traversal vulnerability and multiple authentication-bypass vulnerabilities because the application fails to sufficiently sanitize user-supplied input.

Exploiting these issues may allow an attacker to bypass authentication and perform unauthorized actions on the affected application, and to obtain sensitive information that could aid in further attacks.

XtreamerPro Directory Traversal Vulnerability and Authentication-Bypass Vulnerabilities

Attackers can exploit these issues via a browser.

The following example URIs are available:

• /data/vulnerabilities/exploits/47880.txt

XtreamerPro Directory Traversal Vulnerability and Authentication-Bypass Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

XtreamerPro Directory Traversal Vulnerability and Authentication-Bypass Vulnerabilities

References:

• Vendor Homepage (xtreamer)