A directory traversal vulnerability exists in the SMART Web Server.
97b4c28636a988b5b3e31bd1731c3e6407303b06cb0beb95394c72c068bbab87
Title
-----
DDIVRT-2009-22 SMART Board Whiteboard Directory Traversal Vulnerability
Severity
--------
High
Date Discovered
---------------
January 19th, 2009
Discovered By
-------------
Digital Defense, Inc. Vulnerability Research Team
Credit: David Marshall and r@b13$
Vulnerability Description
-------------------------
A directory traversal condition exists in SMART Web Server whereby arbitrary files may be retrieved from this host's file system. Attackers may leverage this issue to gain access to sensitive information stored on this host.
Solution Description
--------------------
No patch is available at this time.
Tested Systems / Software (with versions)
------------------------------------------
Windows XP, SMART Board Whiteboard
Vendor Contact
--------------
Vendor Name: SMART Technologies ULC
Vendor Website: http://www2.smarttech.com/