[34774] in bugtraq
=?iso-8859-1?Q?Multible_Vulnerabilites_in_Aldos_Webserver?=
daemon@ATHENA.MIT.EDU (oliver@greyhat.de)
Mon May 3 14:11:01 2004
To: <bugtraq@securityfocus.com>
From: <oliver@greyhat.de>
Message-Id: <5452427$1083580669409620fdc8f863.87853591@config5.schlund.de>
X-Originating-From: 5452427
Content-Type: text/plain;
charset="iso-8859-1"
Mime-Version: 1.0
Content-Transfer-Encoding: 8bit
Date: Mon, 3 May 2004 12:48:02 +0200
Multible Vulnerabilites in Aldos Webserver
==========================================
Aldo's Web Server is a super-compact Web service daemon that not only
let you share easily your files, it also acts as a Advertisment or
site blocker.
Version:
========
1.5 on Windows Platform
Vulnerabilities:
================
1) Physical Path Disclosure
Connecting to Aweb via Telnet/Netcat, and entering any character will
lead to an output similar to this:
"Oliver_karow||D:\webserverMAI\aweb\"
whereby oliver_karow is the user which runs the webserver process.
2) Directory Traversal
Connecting to Aweb via Telnet/Netcat, and requesting a file like
"GET /../../../boot.ini HTTP/1.0" enables an attacker to get access
to files outside of the webroot folder.
Vendor:
=======
www.aldostools.com
Vendor Status:
==============
Informed since 30.04.2004 - no responce
Discovered:
===========
www.oliverkarow.de - 30.04.2004
www.oliverkarow.de/research/AldosWebserverMultipleVulns.txt
