Secunia

Dennis Rand has reported two vulnerabilities in WebConnect, which can be exploited by malicious people to cause a DoS (Denial of Service) or gain knowledge of potentially sensitive information.

1) An error in the handling of reserved MS-DOS device names can be exploited to cause the server to become unresponsive by sending a specially crafted HTTP request containing a reserved MS-DOS device name.

The vulnerability has been reported in versions 6.4.4 and 6.5. Prior versions may also be affected.

2) Input passed to the "WCP_USER" parameter in "jretest.html" is not properly sanitised before being used. This can be exploited to read the contents of arbitrary files outside the web root via directory traversal attacks.

The vulnerability has been reported in version 6.4.4. Prior versions may also be affected.

Solution
Update to version 6.5.1 or apply patch.

Provided and/or discovered by
Dennis Rand

Changelog
Further details available in Customer Area

Original Advisory
http://cirt.dk/advisories/cirt-29-advisory.pdf

Other references
Further details available in Customer Area

Deep Links
Links available in Customer Area