|
 |
| SecurityReason | ||
| WLB | ||
| Services | ||
| RSS | ||
| Corporate | ||
| Note | ||
If you have found a vulnerability, please send to our SecurityAlert Database : |
||
Home  SecurityAlert Database |
||||
SecurityAlert : 2159 CVE : CVE-2007-0357 SecurityRisk : Low  (About) Remote Exploit : Yes Local Exploit : No Exploit Available : Yes Credit : DPR Published : 19.01.2007
Advisory Content : - Description The "AVM IGD CTRL Service", a Universal Plug and Play (UPNP) service for windows, which is part of the software package "Fritz!DSL Software 02.02.29" provides the possibility to read any file on the windows system partition for any user - no matter how much restricted rights the user has. It is even possible to read files from any LAN computer on which this service is running and it is possible to read critical system files (SAM DB copies, profile files of any user) because the service is running under the (locally) most privileged system account. The mentioned software package is shipped with VOIP routers from the german company AVM (www.avm.de). - Reproduction Relative URLs for the AR7 webserver (which is part of the mentioned UPNP service) can be used to read files on the system partition. Because backslashes can't be directly used in a URL "%5C" has to be used. Examples for local and remote files of LAN computers: http://localhost:49001/..%5C..%5C..%5Cwindows%5Csystem.ini http://192.168.178.20:49001/..%5C..%5C..%5Cwindows%5Csystem.ini - Workaround Disable the "AVM IGD CTRL Service" under the services control panel. Regards, -- DPR  Feedback : If you have additional information or notice any errors regarding this security advisory, please use contact form or email us at info()securityreason()com. |
||||
| Alert | ||
libopie __readrec() off-by-one
This advisory is related to new FreeBSD advisory FreeBSD-SA-10:05.opie. |
||
| Apache |  |
|
» Apache ActiveMQ 5.4.0 |
||
| PHP | |
|
» PHP 5.2.12/5.3.1 |
||
- 2010-04-23| Copyright © SecurityReason.com. All Rights Reserved. |