SecuriTeam - Orb Media Server Directory Traversal

Security News - Security Reviews - Exploits - Tools - UNIX Focus - Windows Focus

SecuriTeam
Beyond Security

SecuriTeam Home
Ask the Team
Mailing Lists
Advertising Info
Blogs

Black Box Testing
Vulnerability Assessment
Vulnerability Scanner

	SecuriTeam in Your Inbox

	E-mail this article to a friend

New vulnerability?
New tool?
Tell us

Orb Networks' Orb media server is vulnerable to directory traversal attacks. Users can leverage specially crafted GET requests to read arbitrary files.

Credit:
The information has been provided by Steven James and r at b13$.

Protect your website!
Use an External Vulnerability Scanner!
Nothing to install. First report in 1 hour!
www.beyondsecurity.com/vulnerability-scanner

Vulnerable Systems:
* Orb version 2.01.0017

Immune Systems:
* Orb version 2.01.0022

Solution:
This issue is fixed in version 2.01.0022 available at: http://www.orb.com/download/us/setup_2.01.0022.exe

	Trend Micro HouseCall "notifyOnLoadNative()" Vulnerability
	Citrix Broadcast Server login.asp SQL Injection
	Trend Micro HouseCall ActiveX Control Arbitrary Code Execution
	PGP Desktop PGPwded.sys Denial of Service
	Microsoft Hierarchical FlexGrid Control Integer Overflows (MS08-070)
	Microsoft Word Malformed FIB Arbitrary Free Vulnerability (MS08-072)
	CA ARCserve Backup LDBserver Vulnerability
	CA ARCserve Backup RPC "handle_t" Argument Vulnerability
	Internet Explorer 8.0 Beta 2 Anti-XSS Filter Vulnerabilities
	Microsoft Internet Explorer HTML Tag Long File Name Extension Stack Buffer Overflow Vulnerability (MS08-073)
	Microsoft Windows Graphics Device Interface Integer Overflow Vulnerability (MS08-071)
	Microsoft Excel Malformed Object Memoy Corruption Vulnerability (MS08-074)
	Google Chrome MetaCharacter URI Obfuscation Vulnerability
	iPhone Configuration Web Utility for Windows Directory Traversal
	Microsoft Windows Active Directory LDAP Server Information Disclosure Vulnerability