Ethical Hacking Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package. | Computer Forensics Training at InfoSec Institute Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors. |

| Subject: | [NT] KF WebServer Directory Traversal Vulnerability |
|---|---|
| Date: | 21 Jul 2005 13:36:20 +0200 |
The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com - - promotion The SecuriTeam alerts list - Free, Accurate, Independent. Get your security news from a reliable source. http://www.securiteam.com/mailinglist.html - - - - - - - - - KF WebServer Directory Traversal Vulnerability ------------------------------------------------------------------------ SUMMARY " <http://www.keyfocus.net/kfws/> KF Web Server is a free HTTP Server that can host an unlimited number of web sites." By crafting a special HTTP URL and sending it to the KF web server, attackers can cause the product to return content from directories that would be otherwise inaccessible. DETAILS Vulnerable Systems: * KF Web Server version 2.5.0 Exploit: http://[victim_address]/All%20Disk%20Drives/C:/ ADDITIONAL INFORMATION The information has been provided by <mailto:basher13@linuxmail.org> eric basher. ======================================== This bulletin is sent to members of the SecuriTeam mailing list. To unsubscribe from the list, send mail with an empty subject line and body to: list-unsubscribe@securiteam.com In order to subscribe to the mailing list, simply forward this email to: list-subscribe@securiteam.com ==================== ==================== DISCLAIMER: The information in this bulletin is provided "AS IS" without warranty of any kind. In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.
| <Prev in Thread] | Current Thread | [Next in Thread> |
|---|---|---|
| ||
| Previous by Date: | [NT] Remote Control Server DoS (Exploit), SecuriTeam |
|---|---|
| Next by Date: | [TOOL] Binhex - Convert Files Generated by Xbin or Macget Into BinHex Format, SecuriTeam |
| Previous by Thread: | [NT] Remote Control Server DoS (Exploit), SecuriTeam |
| Next by Thread: | [TOOL] Binhex - Convert Files Generated by Xbin or Macget Into BinHex Format, SecuriTeam |
| Indexes: | [Date] [Thread] [Top] [All Lists] |