NetCat CMS 'netshop/post.php' Information Disclosure Vulnerability

Bugtraq ID:	72854
Class:	Input Validation Error
CVE:	CVE-2015-2214
Remote:	Yes
Local:	No
Published:	Mar 03 2015 12:00AM
Updated:	Apr 13 2015 09:01PM
Credit:	Wang Jing
Vulnerable:	NetCat NetCat 5.01 NetCat NetCat 3.12 NetCat NetCat 3.0 NetCat NetCat 2.4 NetCat NetCat 2.3 NetCat NetCat 2.2 NetCat NetCat 2.1 NetCat NetCat 2.0 NetCat NetCat 1.1
Not Vulnerable:

NetCat CMS 'netshop/post.php' Information Disclosure Vulnerability

NetCat CMS is prone to an information disclosure vulnerability.

An attacker can exploit this issue to gain potentially sensitive information within context of the affected system.

NetCat 5.01, 3.12, 3.0, 2.4, 2.3, 2.2, 2.1, 2.0 and 1.1 are vulnerable; other versions may also be affected.

NetCat CMS 'netshop/post.php' Information Disclosure Vulnerability

An attacker can exploit this issue using readily available commands and tools.

NetCat CMS 'netshop/post.php' Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

NetCat CMS 'netshop/post.php' Information Disclosure Vulnerability

References:

• NetCat Homepage (AIST)
  
• NetCat CMS Full Path Disclosure (Information Disclosure) (Tetraph)