WorldClient WDaemon web服务器任意文件读取漏洞-安全小百科

WorldClient WDaemon web服务器任意文件读取漏洞

漏洞ID	1105916	漏洞类型	未知
发布时间	2000-07-12	更新时间	2005-05-02
CVE编号	CVE-2000-0660	CNNVD-ID	CNNVD-200007-030
漏洞平台	Windows	CVSS评分	5.0

|漏洞来源

https://www.exploit-db.com/exploits/20070
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200007-030

|漏洞详情

WorldClient2.1版本的WDaemonweb服务器存在漏洞。远程攻击者可以借助..（点点）攻击来读取任意文件。

|漏洞EXP

source: http://www.securityfocus.com/bid/1462/info

The HTTP interface for WorldClient 2.1 is vulnerable to a directory traversal. By requesting a URL composed of the filename and .. it is possible for a remote user to retrieve and dowload any file of known location.

Example: 
http://email.victim.com/......winntrepairsam._

|参考资料

来源:BUGTRAQ
名称:20000712Infosec.20000712.worldclient.2.1
链接:http://archives.neohapsis.com/archives/bugtraq/2000-07/0173.html
来源:XF
名称:worldclient-dir-traverse
链接:http://xforce.iss.net/static/4913.php
来源:BID
名称:1462
链接:http://www.securityfocus.com/bid/1462
来源:www.altn.com
链接:http://www.altn.com/Downloads/WorldClient/Release/RelNotes.txt
来源:OSVDB
名称:1459
链接:http://www.osvdb.org/1459

相关推荐: Van Dyke SecureCRT Remote Command Execution Vulnerability

Van Dyke SecureCRT Remote Command Execution Vulnerability 漏洞ID 1097551 漏洞类型 Design Error 发布时间 2004-11-23 更新时间 2004-11-23 CVE编号 N/A…

文章版权归作者所有，未经允许请勿转载。

THE END