Perl Web Server 0.x - Directory Traversal

2001-04-24T00:00:00
ID EXPLOITPACK:A2C105D2DB0F11CFB2748D6BAA82F905
Type exploitpack
Reporter neme-dhc
Modified 2001-04-24T00:00:00

Description

Perl Web Server 0.x - Directory Traversal

                                        
                                            source: https://www.securityfocus.com/bid/2648/info

Perl Web Server, an experimental cross-platform web server project, does not prevent a remote user from requesting documents outside the ServerRoot (location of the virtual / directory).

This means that if an attacker knows the location of a sensitive file relative to the ServerRoot, he can retrieve the contents of the file by making an HTTP request containing the relative path. 

o retrieve /etc/password from a vulnerable host, request:

http://www.server.com/../../../../etc/passwd

The number of ../ path characters will depend on the ServerRoot (location of the virtual / directory) setting.