Mutant Penguin MPWeb PRO Directory Traversal Vulnerability
BID:8745
Info
Mutant Penguin MPWeb PRO Directory Traversal Vulnerability
| Bugtraq ID: | 8745 |
| Class: | Access Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | Unknown |
| Published: | Oct 01 2003 12:00AM |
| Updated: | Oct 01 2003 12:00AM |
| Credit: | The disclosure of this issue has been credited to GamaSec Security And Forensic Experts <[email protected]>. |
| Vulnerable: |
Mutant Penguin MPWeb PRO 1.1.2 |
| Not Vulnerable: | |
Discussion
Mutant Penguin MPWeb PRO Directory Traversal Vulnerability
It has been reported that MPWeb PRO may be prone to a directory traversal vulnerability that may allow an attacker to traverse outside the server root directory by using '/./../' character sequences. The issue is caused by insufficient sanitization of user-supplied input.
This vulnerability may be successfully exploited to gain sensitive information about a vulnerable host that could be used to launch further attacks against the system.
MPWeb PRO version 1.1.2 has been reported to be affected by this issue, however other versions may be vulnerable as well.
It has been reported that MPWeb PRO may be prone to a directory traversal vulnerability that may allow an attacker to traverse outside the server root directory by using '/./../' character sequences. The issue is caused by insufficient sanitization of user-supplied input.
This vulnerability may be successfully exploited to gain sensitive information about a vulnerable host that could be used to launch further attacks against the system.
MPWeb PRO version 1.1.2 has been reported to be affected by this issue, however other versions may be vulnerable as well.
Exploit / POC
Mutant Penguin MPWeb PRO Directory Traversal Vulnerability
The following proof of concept was provided:
http://www.example.com/./../mpweb.ini
http://www.example.com/./.././.././../winnt/repair/sam
The following proof of concept was provided:
http://www.example.com/./../mpweb.ini
http://www.example.com/./.././.././../winnt/repair/sam
Solution / Fix
Mutant Penguin MPWeb PRO Directory Traversal Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
Mutant Penguin MPWeb PRO Directory Traversal Vulnerability
References:
References:
- MPWeb PRO Homepage (Mutant Penguin)