keene digital media server 1.0.2 - Directory Traversal variant vulnerability

ID SSV:78146
Type seebug
Reporter Root
Modified 2014-07-01T00:00:00


No description provided by source.


It is reported that DMS is susceptible to a directory traversal vulnerability.

The directory traversal issue is present upon requesting files outside the webroot of the application using hex encoded directory traversal character sequences to create a relative path to the target file.

This vulnerability will allow a remote attacker to retrieve potentially sensitive files, possibly aiding them in further system compromise.

Version 1.0.2 of the software is reported vulnerable to this issue. Other versions may also be affected.\system.log