TrustPort WebFilter is prone to an arbitrary file-access vulnerability.

An attacker can exploit this issue to read arbitrary files in the context of the web server process, which may aid in further attacks. Impact Level: Application

Updates are available.

A vulnerability exists within the help.php script, allowing an remote attacker to access files outside of the webroot with SYSTEM privileges, without authentication.

TrustPort WebFilter 5.5.0.2232 is vulnerable other versions may also be affected.

Send a special GET request, with a base64 encoded directory traversal string and file name

• http://www.securityfocus.com/bid/61662

---

Updated on 2015-03-25