Aspen 0.8 - Directory Traversal
Earlier versions are also possibly vulnerable.
Product: Aspen 0.8
Discovered by: Daniel Ricardo dos Santos
CVE Request - 15/03/2013
CVE Assign - 18/03/2013
CVE Number - CVE-2013-2619
Vendor notification - 18/03/2013
Vendor reply - No reply
Public disclosure - 01/04/2013
Aspen 0.8 is vulnerable to a directory traversal.
Aspen is a Python webserver.
Aspen is framework-agnostic and relies heavily on WSGI.
Aspen is fast enough.
The vulnerability happens when directory indexing is turned on (default
configuration in this version) and a user requests, for instance
The vulnerability may be tested with the following command-line:
curl -v4 http://<server>:<port>/../../../../../../etc/passwd
Tested with version 0.8 but earlier versions are possibly vulnerable.
Upgrade to version 0.22 - http://aspen.io/
The Common Vulnerabilities and Exposures (CVE) project has assigned the
name CVE-2013-2619 to this issue. This is a candidate for inclusion in
the CVE list (http://cve.mitre.org), which standardizes names for
Daniel Ricardo dos Santos
SEC+ Information Security Company - http://www.secplus.com.br/