From: Secunia Security Advisories (sec-advsecunia.com)
Date: Wed Jan 28 2004 - 08:14:43 CST

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

TITLE:
BremsServer Cross Site Scripting and Directory Traversal

SECUNIA ADVISORY ID:
SA10731

VERIFY ADVISORY:
http://www.secunia.com/advisories/10731/

CRITICAL:
Not critical

IMPACT:
Cross Site Scripting, Exposure of sensitive information

WHERE:
From local network

SOFTWARE:
Der Herberlin BremsServer 1.x

DESCRIPTION:
Donato Ferrante has reported some issues in Der Herberlin
BremsServer. Allowing malicious people to conduct Cross Site
Scripting and directory traversal.

The problem is that the classic directory traversal character
sequence "../" isn't properly filtered. This can be exploited to view
files outside the web root.

Another problem is that the complete URL is returned unfiltered in
error pages. This can be exploited to conduct Cross Site Scripting.

This has been reported to affect version 1.2.4 and prior.

SOLUTION:
Der Herberlin BremsServer is intended as an internal or local test
and development server. Do not use it in production environments.

The impact of directory traversal attacks can be lessened by placing
the web root on a separate drive letter or by restricting access
using file system restrictions.

PROVIDED AND/OR DISCOVERED BY:
Donato Ferrante

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://www.secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://www.secunia.com/about_secunia_advisories/

Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories

----------------------------------------------------------------------

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]