WhatsUp Small Business Input Validation Hole Lets Remote Users Traverse the Directory and View Files
|
|
SecurityTracker Alert ID: 1015141 |
|
SecurityTracker URL: http://securitytracker.com/id/1015141
|
|
CVE Reference:
GENERIC-MAP-NOMATCH
(Links to External Site)
|
Date: Nov 3 2005
|
Impact:
Disclosure of system information, Disclosure of user information
|
Vendor Confirmed: Yes Exploit Included: Yes
|
Version(s): 2004
|
Description:
CIRT.DK reported a vulnerability in WhatsUp Small Business 2004. A remote user can view files on the target system.
The software does not properly validate user-supplied input. A remote user can supply a specially crafted URL containing '../' or '..\' directory traversal characters to view files on the target system.
A demonstration exploit URL is provided:
http://[target]:8022/../../../../../../../../../../../../boot.ini
The vendor was notified on September 11, 2005.
|
Impact:
A remote user can view files on the target system.
|
Solution:
No solution was available at the time of this entry. The vendor plans to issue a fix later.
|
Vendor URL: ipswitch.com/products/whatsup/small_business/index.asp (Links to External Site)
|
Cause:
Access control error, Input validation error
|
Underlying OS:
Windows (2000), Windows (2003), Windows (XP)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Wed, 2 Nov 2005 22:07:48 +0100
Subject: [CIRT.DK] Ipswitch Whatsup small Business 2004 - Directory Traversal
|
Vendor: IpSwitch
Product: Ipswitch Whatsup small Business 2004
Description:
The Whatsup Small Business 2004 are vulnerable to a directory traversal attack using "../"
Read the full advisory at http://www.cirt.dk
CIRT.DK
|
|
