A directory traversal vulnerability in Genivia Crystal Live HTTP Server 6.01 allows unauthenticated attackers to access sensitive system files, posing a significant risk to server integrity.

The application suffers from a path traversal vulnerability (CWE-22) where improper sanitization of URL path segments allows an unauthenticated attacker to escape the web root using "../" sequences. This permits unauthorized access to arbitrary files on the underlying file system.

The ability for an unauthenticated attacker to read arbitrary files from the server presents a critical risk to confidentiality. An attacker could extract configuration files, credentials, or sensitive system data, which often serves as a precursor to full system compromise or lateral movement within the network. Given the CVSS score of 7.5, this high-severity flaw requires immediate attention to prevent data exposure and potential service disruption.

Immediate Action: Since there is no official patch available from the vendor for this legacy version, you must restrict access to the affected server by placing it behind a robust firewall or disabling the service if it is not business critical.

Proactive Monitoring: Review web server access logs for anomalous requests containing directory traversal patterns, such as multiple consecutive "../" sequences.

Compensating Controls: Implement a Web Application Firewall (WAF) to inspect incoming HTTP requests and block any traffic that attempts to traverse directories or access sensitive system paths.

Public Exploit Available: Yes, a functional proof-of-concept exists and is documented in the Exploit-DB entry 47666.

Due to the availability of public exploit code and the lack of a vendor-supplied patch, this vulnerability poses an elevated risk to environments running Crystal Live HTTP Server 6.01. Organizations should prioritize isolating these systems from the public internet or migrating to a supported, secure alternative to mitigate the risk of information disclosure.