[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Enceladus Server Suite traversal directory vulnerability

To: "bugtraq" <bugtraq@xxxxxxxxxxxxxxxxx>
Subject: Enceladus Server Suite traversal directory vulnerability
From: "luca.ercoli@xxxxxxxxx" <luca.ercoli@xxxxxxxxx>
Date: Sun, 8 Dec 2002 20:15:51 +0100
Delivered-to: mailing list bugtraq@xxxxxxxxxxxxxxxxx
Delivered-to: moderator for bugtraq@xxxxxxxxxxxxxxxxx
Delivery-date: Wed, 11 Dec 2002 22:00:57 +0100
Envelope-to: bugtraq@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx
List-help: <mailto:bugtraq-help@securityfocus.com>
List-id: <bugtraq.list-id.securityfocus.com>
List-post: <mailto:bugtraq@securityfocus.com>
List-subscribe: <mailto:bugtraq-subscribe@securityfocus.com>
List-unsubscribe: <mailto:bugtraq-unsubscribe@securityfocus.com>
Mailing-list: contact bugtraq-help@xxxxxxxxxxxxxxxxx; run by ezmlm

Summary: Enceladus Server Suite is an internet/intranet lightweight web
and ftp server for windows.

Details: The web server has been found to contain a security flaw that
allows attackers to travers up the root directory and view/download
files on the system.

Vulnerable System: Enceladus Server Suite version 2.6.1

Example: http://host/../

From Luca Ercoli luca.ercoli@xxxxxxxxx

Prev by Date: Re: [VulnWatch] proftpd <=1.2.7rc3 DoS
Next by Date: Re: KunaniFTP-Server v.1.0.10 allows dictionary traversal
Previous by thread: Re: [VulnWatch] proftpd <=1.2.7rc3 DoS
Next by thread: MTPSR1-120 Firewall Proxy configuration software
Index(es):
- Date
- Thread