Exploit Gordano NTMail 4.2 - Web File Access

[Exploiter]

EDB-ID

19222

Проверка EDB

1. Пройдено

Автор

MARC

Тип уязвимости

REMOTE

Платформа

MULTIPLE

CVE

cve-1999-0927

Дата публикации

1999-05-25

Gordano NTMail 4.2 - Web File Access

source: https://www.securityfocus.com/bid/279/info

A vulnerability in Gordano's NTMail allows remote malicious users to steal local files.

Gordano's NTMail is a Windows NT mail server program. One of its features is allowing administrators to configure the server and users to read their email with a web browser via a built-in web server.

The web server fails to check whether requested files fall outside its document tree (by using ".." in the URL). Thus attackers can retrieve files in the same drives as that on which the software resides if they know or can get it's filename. 

http://www.example.com:8000/../../../../../boot.ini