602LAN SUITE 目录遍历漏洞

漏洞ID	1108748	漏洞类型	路径遍历
发布时间	2005-05-05	更新时间	2005-10-20
CVE编号	CVE-2005-1423	CNNVD-ID	CNNVD-200505-842
漏洞平台	Windows	CVSS评分	6.4

|漏洞来源

https://www.exploit-db.com/exploits/25621
http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-200505-842

|漏洞详情

602LANSUITE2004.0.05.0413的邮件程序存在目录遍历漏洞，远程攻击者可以通过在A参数内的..序列发起拒绝服务攻击并测定任意文件是否存在。

|漏洞EXP

source: http://www.securityfocus.com/bid/13519/info

602 LAN Suite 2004 is reported prone to a directory traversal vulnerability.

It is reported that an attacker can exploit this issue to detect the presence of files on a computer and potentially cause a denial of service condition.

A successful attack may aid in further attacks against the system or lead to a crash due to resource exhaustion. 

http://www.example.com/mail?A=/../../../../../../../[file]

|参考资料

来源:OSVDB
名称:16069
链接:http://www.osvdb.org/16069
来源:SECUNIA
名称:15231
链接:http://secunia.com/advisories/15231

相关推荐: Haakon Nilsen简单集成印刷系统（SIPS）CRLF注入漏洞

Haakon Nilsen简单集成印刷系统（SIPS）CRLF注入漏洞漏洞ID 1203337 漏洞类型未知发布时间 2002-12-31 更新时间 2002-12-31 CVE编号 CVE-2002-2218 CNNVD-ID CNNVD-200212…