nCube Server Manager Directory Traversal Vulnerability
BID:9004
Info
nCube Server Manager Directory Traversal Vulnerability
| Bugtraq ID: | 9004 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 10 2003 12:00AM |
| Updated: | Nov 10 2003 12:00AM |
| Credit: | Discovery of this vulnerability has been credited to Beck Mr.R <[email protected]>. |
| Vulnerable: |
nCUBE Server Manager 1.0 |
| Not Vulnerable: | |
Discussion
nCube Server Manager Directory Traversal Vulnerability
nCUBE Server Manager has been reported prone to a directory traversal vulnerability. The issue presents itself likely due to a lack of sufficient sanitization performed on URI parameters. A remote attacker may exploit this condition by supplying directory traversal sequences as a value for the affected URI parameter passed to a Server Manager script. Ultimately this may allow the attacker to break out of the webserver root and view arbitrary directory listings and potentially arbitrary files on the vulnerable system.
nCUBE Server Manager has been reported prone to a directory traversal vulnerability. The issue presents itself likely due to a lack of sufficient sanitization performed on URI parameters. A remote attacker may exploit this condition by supplying directory traversal sequences as a value for the affected URI parameter passed to a Server Manager script. Ultimately this may allow the attacker to break out of the webserver root and view arbitrary directory listings and potentially arbitrary files on the vulnerable system.
Exploit / POC
nCube Server Manager Directory Traversal Vulnerability
The following proof of concept has been supplied:
http://example.com/cgi-bin/nph-showlogs.pl?files=../../&filter=.*&submit=Go&linecnt=500&refresh=0
The following proof of concept has been supplied:
http://example.com/cgi-bin/nph-showlogs.pl?files=../../&filter=.*&submit=Go&linecnt=500&refresh=0
Solution / Fix
nCube Server Manager Directory Traversal Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
References
nCube Server Manager Directory Traversal Vulnerability
References:
References:
- nCUBE Homepage (nCUBE)
- nCUBE Server Manager (Beck Mr.R