Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:INFO-LEAK:MUL-WEB-SERVER |
|---|---|
Severity |
Minor |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Multiple Product Web server Information Disclosure |
Release Date |
2013/06/10 |
Update Number |
2271 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Multiple Product Web server Information Disclosure
This signature detects attempts to exploit a known vulnerability in Multiple Product. A successful attack can lead to unauthorized information disclosure.
Extended Description
Directory traversal vulnerability in the web server in Cogent DataHub 7.1.1.63 and earlier allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in an HTTP request.
Affected Products
- Cogentdatahub cogent_datahub 7.0
- Cogentdatahub cogent_datahub 7.0.2
- Cogentdatahub cogent_datahub 7.1.0
- Cogentdatahub cogent_datahub 7.1.1
- Cogentdatahub cogent_datahub 7.1.1.63
References
- BugTraq: 49610
- BugTraq: 49611
- CVE: CVE-2011-3502
- CVE: CVE-2009-3646
- CVE: CVE-2011-3493
- CVE: CVE-2011-3501
- CVE: CVE-2011-3500