netserve Web server 1.0.7 – Directory Traversal

15次阅读
没有评论

netserve Web server 1.0.7 – Directory Traversal

漏洞ID 1054271 漏洞类型
发布时间 2003-11-17 更新时间 2003-11-17
netserve Web server 1.0.7 - Directory TraversalCVE编号 N/A
netserve Web server 1.0.7 - Directory TraversalCNNVD-ID N/A
漏洞平台 Windows CVSS评分 N/A
|漏洞来源
https://www.exploit-db.com/exploits/23387
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
source: http://www.securityfocus.com/bid/9059/info

It has been reported that NetServe may be prone to a directory traversal vulnerability that may allow an attacker to gain access to sensitive information. The issue presents itself due to insufficient sanitization of user-supplied input. An attacker may traverse outside the server root directory by using '../' character sequences.

NetServe Web Server version 1.0.7 is reported to be prone to this issue, however other versions may be affected as well. 

http://www.example.com/../test/test.txt

相关推荐: 12Planet Chat Server Administration Page Clear Text Authentication Vulnerability

12Planet Chat Server Administration Page Clear Text Authentication Vulnerability 漏洞ID 1100427 漏洞类型 Design Error 发布时间 2003-04-11 更新…

正文完
 0