HTTP: Technote print.cgi "board" Function File Disclosure

This signature detects directory traversal attempts that exploit the print.cgi script in TECH-NOTE 2000. Because the script validates input incorrectly, attackers can remotely access arbitrary files from the server.

Extended Description

Technote Inc. offers a Multicommunication Package which includes a web board type of service. A script that ships with Technote, print.cgi, accepts a parameter called "board". This remotely-supplied variable is used as a filename when the open() function is called. In addition to allowing the attacker to specify a file to be opened remotely, the variable is not checked for "../" character sequences. As a result, a malicious remote user can specify an arbitrary file on the file system as this variable (by using ../ sequences followed by its real path), which will be opened by the script. Its contents will then be disclosed to the attacker. Successful exploitation of this vulnerability could lead to the disclosure of sensitive information and possibly assist in further attacks against the victim It should be noted that the attacker may only read files which are accessible to the web-server process.

Affected Products

Technote technote

References

BugTraq: 2155

CVE: CVE-2001-0074

Short Name

HTTP:CGI:TECHNOTE-PRINT-DSCLSR

Severity

Minor

Recommended

False

Recommended Action

None

HTTP: Technote print.cgi "board" Function File Disclosure

Extended Description

Affected Products

References

Found a potential security threat?