Kukol E.V. HTTP & FTP Server Suite File Disclosure Vulnerability
BID:8564
Info
Kukol E.V. HTTP & FTP Server Suite File Disclosure Vulnerability
| Bugtraq ID: | 8564 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 08 2003 12:00AM |
| Updated: | Sep 08 2003 12:00AM |
| Credit: | Discovery is credited to "euronymous" <[email protected]>. |
| Vulnerable: |
Kukol E.V. HTTP & FTP Server Suite 6.2 |
| Not Vulnerable: | |
Discussion
Kukol E.V. HTTP & FTP Server Suite File Disclosure Vulnerability
The web server component of Kukol E.V. HTTP & FTP Server Suite is prone to a file disclosure vulnerability. Remote web users may use directory traversal sequences in requests to gain access to files outside of the server's web root directory.
The web server component of Kukol E.V. HTTP & FTP Server Suite is prone to a file disclosure vulnerability. Remote web users may use directory traversal sequences in requests to gain access to files outside of the server's web root directory.
Exploit / POC
Kukol E.V. HTTP & FTP Server Suite File Disclosure Vulnerability
This issue may be exploited with a web browser. The following example was provided:
http://www.example.com/../windows/system.ini
This issue may be exploited with a web browser. The following example was provided:
http://www.example.com/../windows/system.ini
Solution / Fix
Kukol E.V. HTTP & FTP Server Suite File Disclosure Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Kukol E.V. HTTP & FTP Server Suite File Disclosure Vulnerability
References:
References: