MetaProducts Offline Explorer Directory Traversal Vulnerability

[SMedina () IDEFENSE COM (Servio Medina)]

Received word from MetaProducts regarding the recently posted vulnerability
in MetaProducts Offline Explorer (Bugtraq ID 1231).
According to the vendor:

[begin vendor]

The download directory is accessible via the internal Web server. It is the
only accessible area.  However, in versions 1.0 - 1.2 if a URL
http://127.0.0.1:800/./../../ is entered, it is possible to get to a
directory outside the download directory.  This problem was fixed in OE 1.3
Beta 1 version, and therefore in all later versions as well.  You can no
longer access any areas outside the download directory.

The best workaround, of course, would be to download our latest version.
(v1.3 or greater.)

Best regards,

| Robert J. Atwell Jr.
| MetaProducts Corporation
| Robert.Atwell () metaproducts com
| www.metaproducts.com
        
[end vendor]

Cheers,
Servio F. Medina

---
Information Security Analyst
www.idefense.com