Path Traversal in NitroShare Desktop

Executive Summary

NitroShare Desktop through 0.3.4 has a path traversal flaw in its LAN file transfer server. Unauthenticated attackers on the same network can exploit this by sending a crafted filename with directory traversal sequences in the JSON item header name field. This allows writing arbitrary files outside the intended transfer directory to any location the user has write access to.

Useful 0 Not Useful 0

Detection Guidance

Detecting this vulnerability requires monitoring network traffic for suspicious file transfer requests containing directory traversal sequences. Inspect JSON headers in NitroShare Desktop file transfers for filenames with '..' or absolute paths. Check system logs for unexpected file writes outside the intended transfer directory.

Useful 0 Not Useful 0

Impact Analysis

An attacker could write malicious files to sensitive locations like the Windows Startup folder. This enables persistent code execution on the next user login, potentially allowing full system compromise or malware installation without further user interaction.

Useful 0 Not Useful 0

Compliance Impact

This vulnerability could lead to unauthorized file writes, potentially violating data integrity and confidentiality requirements in GDPR and HIPAA. It may result in unauthorized access to sensitive data or system compromise, triggering compliance breach notifications and penalties.

Useful 0 Not Useful 0

Mitigation Strategies

Immediately update NitroShare Desktop to the latest version if available. Disable the LAN file transfer server if not needed. Restrict write permissions on the Windows Startup folder and other sensitive directories. Monitor for unauthorized file writes and network activity.

Useful 0 Not Useful 0