[Full-disclosure] DDIVRT-2009-22 SMART Board Whiteboard Directory Traversal Vulnerability

[DDI_Vulnerability_Alert]

Title

-----

DDIVRT-2009-22 SMART Board Whiteboard Directory Traversal Vulnerability

 

Severity

--------

High

 

Date Discovered

---------------

January 19th, 2009

 

Discovered By

-------------

Digital Defense, Inc. Vulnerability Research Team

Credit: David Marshall and r at b13$

 

Vulnerability Description

-------------------------

A directory traversal condition exists in SMART Web Server whereby
arbitrary files may be retrieved from this host's file system. Attackers
may leverage this issue to gain access to sensitive information stored
on this host.

 

Solution Description

--------------------

No patch is available at this time.

 

Tested Systems / Software (with versions)

------------------------------------------

Windows XP, SMART Board Whiteboard

 

Vendor Contact

--------------

Vendor Name: SMART Technologies ULC

Vendor Website: http://www2.smarttech.com/

 

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.grok.org.uk/pipermail/full-disclosure/attachments/20090309/10e660c8/attachment.html