NetServe Web Server Multiple Security Vulnerabilities
BID:48406
Info
NetServe Web Server Multiple Security Vulnerabilities
| Bugtraq ID: | 48406 |
| Class: | Design Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 23 2011 12:00AM |
| Updated: | Jun 28 2011 05:10PM |
| Credit: | Gjoko Krstic |
| Vulnerable: |
Net-X Solutions NetServe Web Server 1.0.58 |
| Not Vulnerable: | |
Discussion
NetServe Web Server Multiple Security Vulnerabilities
NetServe Web Server is prone to multiple security vulnerabilities including multiple cross-site scripting, remote file-inclusion, local file-inclusion, script-insertion, HTML-injection, and denial-of-service vulnerabilities.
An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, to upload arbitrary files onto the webserver, execute arbitrary remote and local files within the context of the webserver, obtain sensitive information, steal cookie-based authentication credentials, and deny service to legitimate users. Other attacks are also possible.
NetServe Web Server 1.0.58 is vulnerable; other versions may also be affected.
NetServe Web Server is prone to multiple security vulnerabilities including multiple cross-site scripting, remote file-inclusion, local file-inclusion, script-insertion, HTML-injection, and denial-of-service vulnerabilities.
An attacker can exploit these vulnerabilities to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site, to upload arbitrary files onto the webserver, execute arbitrary remote and local files within the context of the webserver, obtain sensitive information, steal cookie-based authentication credentials, and deny service to legitimate users. Other attacks are also possible.
NetServe Web Server 1.0.58 is vulnerable; other versions may also be affected.
Exploit / POC
NetServe Web Server Multiple Security Vulnerabilities
Attackers can exploit these issues via a browser. To exploit the cross-site scripting issue, an attacker must entice an unsuspecting user into following a malicious URI.
Attackers can exploit these issues via a browser. To exploit the cross-site scripting issue, an attacker must entice an unsuspecting user into following a malicious URI.
Solution / Fix
NetServe Web Server Multiple Security Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
NetServe Web Server Multiple Security Vulnerabilities
References:
References:
- NetServe Web Server Homepage (Net-X Solutions)
- NetServe Web Server v1.0.58 Multiple Remote Vulnerabilities (Gjoko Krstic)