DreamBox DM800 'file' Parameter Local File Disclosure Vulnerability

Bugtraq ID:	50520
Class:	Input Validation Error
CVE:	CVE-2011-4716
Remote:	Yes
Local:	No
Published:	Nov 04 2011 12:00AM
Updated:	Dec 13 2011 06:28PM
Credit:	Todor Donev
Vulnerable:	Dream Multimedia Dreambox DM800
Not Vulnerable:

DreamBox DM800 'file' Parameter Local File Disclosure Vulnerability

DreamBox DM800 is prone to a local file-disclosure vulnerability because it fails to adequately validate user-supplied input.

Exploiting this vulnerability would allow an attacker to obtain potentially sensitive information from local files on computers running the vulnerable application. This may aid in further attacks.

DreamBox DM800 versions 1.5rc1 and prior are vulnerable.

DreamBox DM800 'file' Parameter Local File Disclosure Vulnerability

The following example URI is available:

http://www.example.com/file/?file=[LFD]

DreamBox DM800 'file' Parameter Local File Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

DreamBox DM800 'file' Parameter Local File Disclosure Vulnerability

References:

• Product Homepage (Dream Multimedia)