Super-M Son hServer URI Traversal Arbitrary File Access

Super-M Son hServer is vulnerable to a directory traversal. It enables a remote attacker to view any file on the computer with the privileges of the web server. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. include 'compat.inc' ; ifdescription scriptid11678; scriptversion"1.22";...

Son hServer directory traversal

It's possible to use /.|./ to traverse directory...

Son hServer v0.2: directory traversal

-----BEGIN PGP SIGNED MESSAGE----- ........ .| |.| |/ ........ : / | | | | : : / || | / : : / / | / : :..../ / / | ....: : /| ||/ : : Damage Hacking Group : : Security Advisory : :.............................: http://www.dhgroup.org b d b,.d | | Product: Son hServer v0.2 Authors: super-m.narod.r...