Sockso Music Host Server versions <= 1.5 are vulnerable to a path traversal flaw that allows unauthenticated remote attackers to read arbitrary files from the server’s filesystem. The vulnerability exists in the HTTP interface on port 4444, where the endpoint /file/ fails to properly sanitize user-supplied input. Attackers can traverse directories and access sensitive files outside the intended web root.
Details
| Severity | Base Score | CVE |
|---|---|---|
| HIGH | 8.7 | CVE-2012-10061 |
Exploitation
To exploit this vulnerability, an attacker can send crafted HTTP requests to the vulnerable Sockso Music Host Server, specifically targeting the /file/ endpoint. By manipulating the input parameters, the attacker can traverse the directory structure and access sensitive files that are not intended to be exposed, potentially leading to unauthorized data disclosure.
Affected Products
- Sockso Music Host Server version 1.5 and earlier: This version is susceptible to path traversal attacks, allowing unauthorized file access.
Mitigation
To mitigate this vulnerability, it is recommended to upgrade to a patched version of the Sockso Music Host Server that addresses the path traversal flaw. Additionally, implementing proper input validation and sanitization on user-supplied data can help prevent similar vulnerabilities in the future.