Signature Detail
Short Name |
HTTP:DIR:DIR-TRAV-HDR |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
HTTP |
Keywords |
header directory traversal |
Release Date |
2008/08/08 |
Update Number |
1236 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+ |
HTTP: Directory Traversal in Header
This signature detects attempts to exploit a known vulnerability against multiple Web applications. Attackers can use a directory traversal in an HTTP header to disclose the contents of remote files.
Extended Description
CGI::Session is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data. Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks. CGI::Session 3.94, 3.95, and 4.33 are vulnerable; other versions may also be affected.
Affected Products
- FreeStyle Wiki FSWiki 3.6.2
- FreeStyle Wiki FSWiki 3.6.3dev3
- Sherzod Ruzmetov CGI::Session 3.94
- Sherzod Ruzmetov CGI::Session 3.95
- Sherzod Ruzmetov CGI::Session 4.33
References
- BugTraq: 30267
- URL: http://vuln.sg/cgisession433-en.html