httpdasm Path Traversal Vulnerability

A path traversal vulnerability has been identified in httpdasm version 0.92, a lightweight HTTP server for Windows. This vulnerability allows unauthenticated attackers to read arbitrary files on the host system by sending specially crafted GET requests that include URL-encoded backslashes and directory traversal patterns. Exploitation of this vulnerability can lead to access sensitive files outside the web root directory.

Impact

Exploitation of this vulnerability allows for unauthorized access to files outside the web root directory, potentially leading to the disclosure of sensitive information.

Reproduction

To reproduce this vulnerability, send a GET request to the httpdasm server with a payload that includes URL-encoded directory traversal sequences, such as multiple instances of '%2E%2E%5C', followed by the name of a file located outside the web root, such as 'boot.ini'.