MegaBrowser HTTP Directory Traversal File Disclosure Vulnerability

Bugtraq ID:	7802
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 04 2003 12:00AM
Updated:	Jun 04 2003 12:00AM
Credit:	Discovery of this issue is credited to JeiAr <[email protected]>.
Vulnerable:	MegaBrowser MegaBrowser 0.3
Not Vulnerable:

MegaBrowser HTTP Directory Traversal File Disclosure Vulnerability

The MegaBrowser HTTP server component is prone to a file disclosure vulnerability. Directory traversal sequences may be used to break out of the web root directory. Attackers may gain access to files that are readable by the web server as a result.

MegaBrowser HTTP Directory Traversal File Disclosure Vulnerability

This issue may be exploited with a web browser. The following example was submitted:

http://www.example.com/../../../../../WINNT/repair/sam

MegaBrowser HTTP Directory Traversal File Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

MegaBrowser HTTP Directory Traversal File Disclosure Vulnerability

References:

• MegaBrowser Homepage (MegaBrowser)
  
• MegaBrowser HTTP and FTP Vulnerabilities (JeiAr )