Buy or Renew
Buy or Renew
Cisco + Splunk: It’s a new day for your data. Learn more.
 
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Start a conversation
454
Views
0
Helpful
1
Replies

Closing remote file download hole in MeetingPlace 2.1.1.2?

cjansen171
Level 1
Level 1

‎09-16-2010 02:35 PM - edited ‎03-20-2019 05:59 AM

Hi, I'm trying to find out how to address the issue that you can browse to /public/tutorial?video=/../..//../..//../..//../..//../..//etc/passwd and download the passwd and similarly other files on the filesystem on MeetingPlace without any sort of authentication. Has there been a patch or some way to address this vulnerability?

Thanks!

Labels:
0 Helpful
1 Reply 1

Brad Martin
Level 3
Level 3

‎09-21-2010 12:01 PM

That's amazing. We shut down our system. Do you know if Cisco has documented this anywhere?

0 Helpful
Customers Also Viewed These Support Documents