PT-2006-7117 · Nullsoft · Winamp Web Interface

Luigi Auriemma · Publicado 2006-12-14 · Atualizado 2018-10-17 · CVE-2006-6513

Positive Technologies (AI Summary)

CVSS v2.0

3.5

Baixa

Vetor base

AV:N/AC:M/Au:S/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Winamp Web Interface (Wawi) versions 7.5.13 and earlier

Description The issue allows remote authenticated users to download arbitrary file types under the root via a trailing "." (dot) in a filename in the file parameter. This is related to erroneous behavior of the IsWinampFile function when handling the /dl URI in the CControl::Download function.

Recommendations For Winamp Web Interface (Wawi) versions 7.5.13 and earlier, consider restricting access to the /dl URI until a fix is available. As a temporary workaround, avoid using the file parameter with a trailing "." (dot) in filenames to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2006-6513

Produtos afetados

Winamp Web Interface

Referências · 11

• 🔥 http://aluigi.altervista.org/adv/wawix-adv.txt · Exploit
• 🔥 http://secunia.com/advisories/23292 · Exploit
• 🔥 http://lists.grok.org.uk/pipermail/full-disclosure/2006-December/051217.html · Exploit
• 🔥 http://securitytracker.com/id?1017362 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2006-6513 · Nota de Segurança
• http://securityreason.com/securityalert/2032 · Nota
• http://securityfocus.com/bid/21539 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-6513 · Nota
• http://securityfocus.com/archive/1/454059/100/0/threaded · Nota
• http://vupen.com/english/advisories/2006/4935 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/30829 · Nota