Caucho Technology Resin JavaBean Disclosure Vulnerability
BID:2533
Info
Caucho Technology Resin JavaBean Disclosure Vulnerability
| Bugtraq ID: | 2533 |
| Class: | Input Validation Error |
| CVE: |
CVE-2001-0399 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 03 2001 12:00AM |
| Updated: | Jul 11 2009 06:06AM |
| Credit: | Discovered and posted to Bugtraq by lovehacker <[email protected]> on April 3, 2001. |
| Vulnerable: |
Caucho Resin 1.3 Caucho Resin 1.2 |
| Not Vulnerable: |
Caucho Resin 2.0 b2 Caucho Resin 1.2.5 |
Discussion
Caucho Technology Resin JavaBean Disclosure Vulnerability
A specially constructed HTTP request could enable a remote attacker to gain read access to any known JavaBean file residing on a host running Resin.
On Resin webservers, JavaBean files reside in a protected directory, '/WEB-INF/classes/'. Unfortunately, this protection can be bypassed due to an input validation bug in the Resin webserver. If an attacker inserts the substring '.jsp' before the path of the JavaBean in the request, the webserver will incorrectly interpret the request and serve the contents of the requested JavaBean to the client.
An attacker exploiting this may be able to gain sensitive information contained in the JavaBeans.
A specially constructed HTTP request could enable a remote attacker to gain read access to any known JavaBean file residing on a host running Resin.
On Resin webservers, JavaBean files reside in a protected directory, '/WEB-INF/classes/'. Unfortunately, this protection can be bypassed due to an input validation bug in the Resin webserver. If an attacker inserts the substring '.jsp' before the path of the JavaBean in the request, the webserver will incorrectly interpret the request and serve the contents of the requested JavaBean to the client.
An attacker exploiting this may be able to gain sensitive information contained in the JavaBeans.
Exploit / POC
Caucho Technology Resin JavaBean Disclosure Vulnerability
The following example has been provided by lovehacker <[email protected]>:
http://target/.jsp/WEB-INF/classes/filename
The following example has been provided by lovehacker <[email protected]>:
http://target/.jsp/WEB-INF/classes/filename
Solution / Fix
Caucho Technology Resin JavaBean Disclosure Vulnerability
Solution:
Caucho Technology has addressed this issue in Resin 1.2.5:
Caucho Resin 1.2
Caucho Resin 1.3
Solution:
Caucho Technology has addressed this issue in Resin 1.2.5:
Caucho Resin 1.2
-
Caucho Technology resin-1.2.5.tar.gz
Unix
http://www.caucho.com/download/resin-1.2.5.tar.gz -
Caucho Technology resin-1.2.5.zip
Windows
http://www.caucho.com/download/resin-1.2.5.zip
Caucho Resin 1.3
-
Caucho Technology resin-1.2.5.tar.gz
Unix
http://www.caucho.com/download/resin-1.2.5.tar.gz -
Caucho Technology resin-1.2.5.zip
Windows
http://www.caucho.com/download/resin-1.2.5.zip
References
Caucho Technology Resin JavaBean Disclosure Vulnerability
References:
References:
- Caucho Technology Homepage (Caucho Technology)