Home page logo

fulldisclosure logo Full Disclosure mailing list archives

Directory Traversal on JTalk HTTP Server
From: rapper crazy <rappercrazzy () gmail com>
Date: Thu, 1 Jul 2010 02:26:29 +0530

Hello All,

Does anyone know of any Directory Traversal issue with Jtalk HTTP server?

I was testing one of my machine and found directory traversal on it.

Tried to enumerate the version but failed, attached below are the logs -
=============Header enumeration=============
[jt () secBox]$ telnet 80
Connected to (
Escape character is '^]'.
GET / HTTP/1.0

HTTP/1.0 404 Not Found
Server: JTALKServer
Allow: GET
Content-Type: text/html

<H1>HTTP Error 404</H1>
<H4>Not Found</H4>
</HTML>Connection closed by foreign host.
==============End Header Enumeration===============

Attached below are the logs for wget when I downloaded the boot.ini file

=========wget logs==============
[jt () secBox]$ wget
--2010-06-30 15:58:45--
Connecting to connected.
HTTP request sent, awaiting response... 200 OK
Length: 208 [application/octet-stream]
Saving to: `boot.ini'

208         --.-K/s   in 0s

2010-06-30 15:58:45 (10.9 MB/s) - `boot.ini' saved [208/208]

[jt () secBox]$ cat boot.ini
[boot loader]
[operating systems]
multi(0)disk(0)rdisk(0)partition(1)\WINDOWS="Windows Server 2003, Standard"
/noexecute=optout /fastdetect
[jt () secBox]$

============end of logs=====================

So my question is does anyone know of any such issue? What could be the
remediation apart from disabling the service?

Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

  By Date           By Thread  

Current thread:
  • Directory Traversal on JTalk HTTP Server rapper crazy (Jul 01)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]