Blackboard Learning System Dropbox File Download Vulnerability

Bugtraq ID:	10515
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jun 10 2004 12:00AM
Updated:	Jun 10 2004 12:00AM
Credit:	Maarten Verbeek <[email protected]> disclosed this vulnerability to Bugtraq.
Vulnerable:	Blackboard Blackboard 6.0
Not Vulnerable:

Blackboard Learning System Dropbox File Download Vulnerability

It is reported that Blackboard improperly allows users to download files posted in the 'Digital Dropbox'. Files in the dropbox are intended for the course administrators.

The application does not verify that the files requested for download are intended for the requester. No authorization checks are performed, and the file is served to anybody that can guess the URI.

An attacker would use this vulnerability to download potentially sensitive information.

This vulnerability is reported to exist in the Blackboard Learning System - Basic Edition (release 6), but likely exists in others as well.

Blackboard Learning System Dropbox File Download Vulnerability

Proof of concept code has been provided by Maarten Verbeek <[email protected]>.

• /data/vulnerabilities/exploits/blackboard_exploit.pl

Blackboard Learning System Dropbox File Download Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Blackboard Learning System Dropbox File Download Vulnerability

References:

• Blackboard Homepage (Blackboard)
  
• Blackboard Learning System - Stealing documents out of the digital dropbox (Maarten Verbeek )