BitDefender Products HTTP Daemon Directory Traversal Vulnerability

  1. Network Vulnerabilities
  2. Web application abuses
  3. BitDefender Products HTTP Daemon Directory Traversal Vulnerability
Summary
BitDefender is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.
Impact
Exploiting this issue allows an attacker to access potentially sensitive information that could aid in further attacks.
Solution
Update to BitDefender GravityZone >= 5.1.11.432
Insight
Arbitrary files can be downloaded using a HTTP GET request:
Affected
BitDefender GravityZone <= 5.1.5.386
Detection
Send a special crafted HTTP GET request and check the response
References
Updated on 2015-03-25
Severity
Medium Severity
Classification
Related Vulnerabilities