CVE-2012-5972

Directory traversal vulnerability in the web server in SpecView 2.5 build 853 and earlier allows remote attackers to read arbitrary files via a ... dot dot dot in a URI...

specview <= 2.5 build 853 - Directory Traversal

No description provided by source. Luigi Auriemma Application: SpecView http://www.specview.com Versions: = 2.5 build 853 Platforms: Windows Bug: web server directory traversal Exploitation: remote Date: 29 Jun 2012 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introductio...

SpecView Directory Traversal

Overview This advisory is a follow up to the original alert titled ICS-ALERT-12-214-01 SpecView Directory Traversal that was published August 01, 2012, on the ICS-CERT Web. This advisory provides mitigation details for a vulnerability, which impacts SpecView products. Independent researcher Luigi...

CVE-2012-5972

Directory traversal vulnerability in the web server in SpecView 2.5 build 853 and earlier allows remote attackers to read arbitrary files via a ... dot dot dot in a URI...

Directory traversal

Directory traversal vulnerability in the web server in SpecView 2.5 build 853 and earlier allows remote attackers to read arbitrary files via a ... dot dot dot in a URI...

CVE-2012-5972

SpecView’s web server contains a directory traversal vulnerability (CVE-2012-5972) in version 2.5 build 853 and earlier, caused by insufficient input sanitization that lets remote attackers access arbitrary files via a crafted URI. Public PoCs/exploits exist per ICS/ICS-CERT advisories; exploitat...

PT-2013-1865 · Specview · Specview

Name of the Vulnerable Software and Affected Versions: SpecView versions 2.5 build 853 and earlier Description: A directory traversal issue in the web server allows remote attackers to read arbitrary files via a series of dots in a URI. Recommendations: For versions 2.5 build 853 and earlier,...

CVE-2012-5972: Relative Path Traversal

Directory traversal vulnerability in the web server in SpecView 2.5 build 853 and earlier allows remote attackers to read arbitrary files via a ... dot dot dot in a URI...

SpecView <= 2.5 build 8 5 3 directory traversal-vulnerability warning-the black bar safety net

Luigi Auriemma Application: SpecView Affected version = 2.5 build 8 5 3 Test platform: Windows Vulnerabilities in the web server directory traversal Author Luigi Auriemma 1Overview 2 Bug 3 The Code 4repair =============== 1Description Description =============== SpecView is an easy to use SCADA...

SpecView Web Server Directory Traversal Vulnerability

SpecView is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input. Remote attackers can use specially crafted requests with directory- traversal sequences '../' to retrieve arbitrary files in the context of the application. Exploiting this issue ma...

specview 2.5 build 853 - Directory Traversal

specview 2.5 build 853 - Directory Traversal Luigi Auriemma Application: SpecView http://www.specview.com Versions: = 2.5 build 853 Platforms: Windows Bug: web server directory traversal Exploitation: remote Date: 29 Jun 2012 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1...

specview 2.5 build 853 - Directory Traversal

Luigi Auriemma Application: SpecView http://www.specview.com Versions: = 2.5 build 853 Platforms: Windows Bug: web server directory traversal Exploitation: remote Date: 29 Jun 2012 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...

SpecView <= 2.5 build 853 Directory Traversal

Exploit for windows platform in category web applications Luigi Auriemma Application: SpecView http://www.specview.com Versions: = 2.5 build 853 Platforms: Windows Bug: web server directory traversal Exploitation: remote Date: 29 Jun 2012 Author: Luigi Auriemma e-mail: email protected web:...

SpecView 2.5 Build 853 Directory Traversal

Luigi Auriemma Application: SpecView http://www.specview.com Versions: = 2.5 build 853 Platforms: Windows Bug: web server directory traversal Exploitation: remote Date: 29 Jun 2012 Author: Luigi Auriemma e-mail: [email protected] web: aluigi.org 1 Introduction 2 Bug 3 The Code 4 Fix...