EUVD-2016-2332

Malware in sbrugna...

Directory traversal

Directory traversal vulnerability in the HTTP file-serving module modhttpfiles in Prosody 0.9.x before 0.9.9 allows remote attackers to read arbitrary files via a .. dot dot in an unspecified path...

CVE-2016-1231

Directory traversal vulnerability in the HTTP file-serving module modhttpfiles in Prosody 0.9.x before 0.9.9 allows remote attackers to read arbitrary files via a .. dot dot in an unspecified path...

CVE-2016-1231

Directory traversal vulnerability in the HTTP file-serving module modhttpfiles in Prosody 0.9.x before 0.9.9 allows remote attackers to read arbitrary files via a .. dot dot in an unspecified path...

PT-2016-4656

Name of the Vulnerable Software and Affected Versions Prosody versions 0.9.x through 0.9.8 Description The issue allows remote attackers to read arbitrary files via a .. dot dot in an unspecified path in the HTTP file-serving module. Recommendations For versions 0.9.x through 0.9.8, update to...