SnapStream Personal Video Station 1.2 a - PVS Directory Traversal
| Reporter | Title | Published | Views | Family All 6 |
|---|---|---|---|---|
 | CVE-2001-1108 | 25 Jun 200204:00 | – | cve |
 | CVE-2001-1108 | 25 Jun 200204:00 | – | cvelist |
 | EUVD-2001-1089 | 7 Oct 202500:30 | – | euvd |
 | CVE-2001-1108 | 26 Jul 200104:00 | – | nvd |
 | Snapstream PVS web directory traversal | 3 Nov 200500:00 | – | openvas |
| Snapstream PVS web directory traversal | 3 Nov 200500:00 | – | openvas |
source: https://www.securityfocus.com/bid/3100/info
Snapstream Personal Video Station is an application for Microsoft Windows which allows users to record video output on their PC and view it at a later time, locally or via an HTTP interface. The Snapstream PVS web interface runs on port 8129.
Snapstream PVS is prone to attacks which allow a remote user to break out of the wwwroot and browse the filesystem at large. The remote attacker may accomplish this by crafting a web request which uses '../' sequences to traverse directories and access arbitrary web-readable files.
The impact of exploiting this vulnerability is that confidential information may be disclosed to the attacker and follow-up attacks against the host may occur.
If exploited conjunction with Bugtraq ID 3101, a remote attacker can gain the administrative password for Snapstream.
http://home.victim.com:8080/../../../../autoexec.bat
http://home.victim.com:8080/../../../winnt/repair/samData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
03 Sep 2012 00:00Current
5.8Medium risk
Vulners AI Score5.8
CVSS 27.5
EPSS0.0282