EServ 2.9x - Password-Protected File Access

Author: Tamer Sahin
type: remote
platform: windows
port: 
date_added: 2002-01-10  
date_updated: 2012-09-09  
verified: 1  
codes: CVE-2002-0112;OSVDB-12082  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 21211.txt  

source: https://www.securityfocus.com/bid/3838/info

EServ is a combination Mail, News, Web, FTP and Proxy Server for Microsoft Windows 9x/NT/2000 systems.

It is possible to construct a web request which is capable of accessing the contents of password protected files/folders on the webserver, such as the admin folder, which contains the administrative interface.

It should be noted that this vulnerability may only be exploited to access password-protected files in sub-folders of wwwroot.

The following example will give the attacker access to the administrative interface:

http://host/./admin/