CVE-2017-16806
HIGH NUCLEIUlterius Server < 1.9.5.0 - Directory Traversal
Title source: nucleiExploitation Summary
EIP tracks 3 public exploits for CVE-2017-16806.
PoCs published by Rick Osgood, rickoooooo, Rick Osgood, Jacob Robles, including Metasploit module auxiliary/admin/http/ulterius_file_download.
A Nuclei detection template is also available.
AI-analyzed exploit summary This exploit leverages a directory traversal vulnerability in Ulterius Server < 1.9.5.0 to retrieve arbitrary files, including the fileIndex.db which contains a list of all indexed files on the system. It can also download specific files by traversing directories via path manipulation.
Description
The Process function in RemoteTaskServer/WebServer/HttpServer.cs in Ulterius before 1.9.5.0 allows HTTP server directory traversal.
Exploits (3)
This exploit leverages a directory traversal vulnerability in Ulterius Server < 1.9.5.0 to retrieve arbitrary files, including the fileIndex.db which contains a list of all indexed files on the system. It can also download specific files by traversing directories via path manipulation.
This is a Python exploit for CVE-2017-16806, targeting a directory traversal vulnerability in Ulterius Server versions prior to 1.9.5.0. It allows arbitrary file access by leveraging path traversal sequences and can retrieve the fileIndex.db for further enumeration.
This Metasploit module exploits a directory traversal vulnerability in Ulterius Server to download arbitrary files, including the fileIndex.db which contains indexed file paths. It supports parsing the database to extract file paths or downloading specific files via path traversal.
Nuclei Templates (1)
References (2)
Scores
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N