SWS Simple Web Server File Disclosure Vulnerability
BID:5662
Info
SWS Simple Web Server File Disclosure Vulnerability
| Bugtraq ID: | 5662 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 05 2002 12:00AM |
| Updated: | Sep 05 2002 12:00AM |
| Credit: | Credited to 3APA3A. |
| Vulnerable: |
SWS SWS Simple Web Server 0.1 .1 SWS SWS Simple Web Server 0.1 .0 SWS SWS Simple Web Server 0.0.4 SWS SWS Simple Web Server 0.0.3 |
| Not Vulnerable: | |
Discussion
SWS Simple Web Server File Disclosure Vulnerability
SWS Simple Web Server is vulnerable to a directory traversal bug, which would allow an attacker to disclose the contents of arbitrary webserver readable files.
It should be noted that the web server does not drop privileges, so this may result in disclosure of arbitrary system files.
SWS Simple Web Server is vulnerable to a directory traversal bug, which would allow an attacker to disclose the contents of arbitrary webserver readable files.
It should be noted that the web server does not drop privileges, so this may result in disclosure of arbitrary system files.
Exploit / POC
SWS Simple Web Server File Disclosure Vulnerability
This issue may be exploited with a web browser.
This issue may be exploited with a web browser.
Solution / Fix
SWS Simple Web Server File Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
SWS Simple Web Server File Disclosure Vulnerability
References:
References: