Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Exploits-HackingTools
[Top] [All Lists]

[NT] KF WebServer Directory Traversal Vulnerability

Subject: [NT] KF WebServer Directory Traversal Vulnerability
Date: 21 Jul 2005 13:36:20 +0200
The following security advisory is sent to the securiteam mailing list, and can 
be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion

The SecuriTeam alerts list - Free, Accurate, Independent.

Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html 

- - - - - - - - -



  KF WebServer Directory Traversal Vulnerability
------------------------------------------------------------------------


SUMMARY

" <http://www.keyfocus.net/kfws/> KF Web Server is a free HTTP Server that 
can host an unlimited number of web sites."

By crafting a special HTTP URL and sending it to the KF web server, 
attackers can cause the product to return content from directories that 
would be otherwise inaccessible.

DETAILS

Vulnerable Systems:
 * KF Web Server version 2.5.0

Exploit:
http://[victim_address]/All%20Disk%20Drives/C:/


ADDITIONAL INFORMATION

The information has been provided by  <mailto:basher13@linuxmail.org> eric 
basher.



======================================== 


This bulletin is sent to members of the SecuriTeam mailing list. 
To unsubscribe from the list, send mail with an empty subject line and body to: 
list-unsubscribe@securiteam.com 
In order to subscribe to the mailing list, simply forward this email to: 
list-subscribe@securiteam.com 


==================== 
==================== 

DISCLAIMER: 
The information in this bulletin is provided "AS IS" without warranty of any 
kind. 
In no event shall we be liable for any damages whatsoever including direct, 
indirect, incidental, consequential, loss of business profits or special 
damages. 




<Prev in Thread] Current Thread [Next in Thread>
  • [NT] KF WebServer Directory Traversal Vulnerability, SecuriTeam <=