Extent RBS ISP web服务器目录遍历漏洞-安全小百科

Extent RBS ISP web服务器目录遍历漏洞

漏洞ID	1106010	漏洞类型	路径遍历
发布时间	2000-09-21	更新时间	2005-05-02
CVE编号	CVE-2000-1036	CNNVD-ID	CNNVD-200012-037
漏洞平台	Multiple	CVSS评分	5.0

|漏洞来源

https://www.exploit-db.com/exploits/20234
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200012-037

|漏洞详情

ExtentRBSISPweb服务器存在目录遍历漏洞。远程攻击者借助对Image参数的..(点点)攻击读取敏感信息。

|漏洞EXP

source: http://www.securityfocus.com/bid/1704/info

A remote user is capable of gaining read access to any file residing in the same directory of a host running Extent RBS ISP through directory traversal. Appending '../' to the 'image' variable request on port 8002 will enable a user to read any available file includeing credit card details, username, password etc.

For example:

http://target:8002/Newuser?Image=../../database/rbsserv.mdb

|参考资料

来源:XF
名称:rbs-isp-directory-traversal
链接:http://xforce.iss.net/static/5275.php
来源:BID
名称:1704
链接:http://www.securityfocus.com/bid/1704
来源:BUGTRAQ
名称:20000920ExtentRBSdirectoryTransversal.
链接:http://archives.neohapsis.com/archives/bugtraq/2000-09/0252.html

相关推荐: Microsoft Windows File Protection Code-Signing Verification Weakness

Microsoft Windows File Protection Code-Signing Verification Weakness 漏洞ID 1101105 漏洞类型 Design Error 发布时间 2002-12-26 更新时间 2002-12-2…

文章版权归作者所有，未经允许请勿转载。

THE END