Peter Winter-Smith has reported two vulnerabilities in RapidCache Server, allowing malicious people to view arbitrary files and cause a Denial of Service.

A boundary error in the handling of HTTP "Host" headers can be exploited to cause a buffer overflow. This can reportedly only be exploited to crash the server process but may potentially also allow code execution.

Missing input validation during the handling of HTTP requests can be exploited to read the content of arbitrary files. This is possible via classic directory traversal attacks using the "../" character sequence.

The vulnerabilities have been reported in version 2.2.6 and prior.

Solution
Use another product.

Provided and/or discovered by
Peter Winter-Smith

Original Advisory
http://www.elitehaven.net/rapidcache.txt

Deep Links
Links available to Secunia VIM customers