CVE-2010-10012
HIGHhttpdasm 0.92 - Unauthenticated Path Traversal via URL-Encoded Backslashes
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2010-10012.
PoCs published by John Leitch, John Leitch, Shelby Pace, including Metasploit module auxiliary/scanner/http/httpdasm_directory_traversal.
AI-analyzed exploit summary This exploit demonstrates a directory traversal vulnerability in httpdASM 0.92 by sending a crafted HTTP GET request with URL-encoded traversal sequences to read files outside the webroot, such as 'boot.ini'.
Description
A path traversal vulnerability exists in httpdasm version 0.92, a lightweight Windows HTTP server, that allows unauthenticated attackers to read arbitrary files on the host system. By sending a specially crafted GET request containing a sequence of URL-encoded backslashes and directory traversal patterns, an attacker can escape the web root and access sensitive files outside of the intended directory.
Exploits (2)
This exploit demonstrates a directory traversal vulnerability in httpdASM 0.92 by sending a crafted HTTP GET request with URL-encoded traversal sequences to read files outside the webroot, such as 'boot.ini'.
This Metasploit module exploits a directory traversal vulnerability in httpdasm v0.92 by sending a crafted GET request with encoded traversal sequences to access arbitrary files on the server. The module retrieves the file content and stores it as loot if the request is successful.
References (4)
Scores
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N