TelCondex SimpleWebserver Directory Traversal Vulnerability

Bugtraq ID:	8998
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Nov 10 2003 12:00AM
Updated:	Nov 10 2003 12:00AM
Credit:	The disclosure of this issue has been credited to nimber <[email protected]>.
Vulnerable:	TelCondex SimpleWebServer 2.13.31027 build 3289
Not Vulnerable:

TelCondex SimpleWebserver Directory Traversal Vulnerability

It has been reported that SimpleWebserver may be prone to a directory traversal vulnerability that may allow an attacker to gain access to sensitive information. The issue presents itself due to insufficient sanitization of user-supplied input. An attacker may traverse outside the server root directory by using '.../' character sequences.

TelCondex SimpleWebserver version 2.13.31027 build 3289 is reported to be prone to this issue, however other versions may be affected as well.

TelCondex SimpleWebserver Directory Traversal Vulnerability

This issue may be exploited with a web browser. The following proof of concept has been provided:

http://www.example.com/.../.../test.txt

TelCondex SimpleWebserver Directory Traversal Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

TelCondex SimpleWebserver Directory Traversal Vulnerability

References:

• YourInfoSystem Home Page (TelCondex Software)
  
• Directory traversal in The TelCondex SimpleWebserver 2.13.31027 (=?koi8-r?Q?=22?=nimber=?koi8-r?Q?=22=20?= )