Sun Java ASP Server Multiple Directory Traversal Vulnerabilities
BID:29538
Info
Sun Java ASP Server Multiple Directory Traversal Vulnerabilities
| Bugtraq ID: | 29538 |
| Class: | Input Validation Error |
| CVE: |
CVE-2008-2403 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 04 2008 12:00AM |
| Updated: | Jun 04 2008 12:00AM |
| Credit: | Anonymous |
| Vulnerable: |
Sun Java System Active Server Pages (ASP) Server 4.0.2 Sun Java System Active Server Pages (ASP) Server 4.0.1 Sun Java System Active Server Pages (ASP) Server 4.0 Sun Java System Active Server Pages 4.0.2 |
| Not Vulnerable: |
Sun Java System Active Server Pages (ASP) Server 4.0.3 Sun Java System Active Server Pages 4.0.3 |
Discussion
Sun Java ASP Server Multiple Directory Traversal Vulnerabilities
Sun Java ASP Server is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied input.
An attacker can exploit these issues using directory-traversal sequences ('../') to view or delete arbitrary files with the privileges of the webserver process. Information obtained may aid in further attacks.
Versions prior to Sun Java ASP Server 4.0.3 are vulnerable.
Sun Java ASP Server is prone to multiple directory-traversal vulnerabilities because the application fails to sufficiently sanitize user-supplied input.
An attacker can exploit these issues using directory-traversal sequences ('../') to view or delete arbitrary files with the privileges of the webserver process. Information obtained may aid in further attacks.
Versions prior to Sun Java ASP Server 4.0.3 are vulnerable.
Exploit / POC
Sun Java ASP Server Multiple Directory Traversal Vulnerabilities
Attackers can use a browser to exploit these issues.
Attackers can use a browser to exploit these issues.
Solution / Fix
Sun Java ASP Server Multiple Directory Traversal Vulnerabilities
Solution:
The vendor has issued an advisory and updates. Please see the references for more information.
Sun Java System Active Server Pages (ASP) Server 4.0
Sun Java System Active Server Pages (ASP) Server 4.0.1
Sun Java System Active Server Pages (ASP) Server 4.0.2
Solution:
The vendor has issued an advisory and updates. Please see the references for more information.
Sun Java System Active Server Pages (ASP) Server 4.0
-
Sun Sun Java System Active Server Pages 4.0.3
https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_SMI-Site/en_ US/-/USD/ViewProductDetail-Start?ProductRef=SJASP-4.0.3-OTH-G-TP@CDS-C DS_SMI
Sun Java System Active Server Pages (ASP) Server 4.0.1
-
Sun Sun Java System Active Server Pages 4.0.3
https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_SMI-Site/en_ US/-/USD/ViewProductDetail-Start?ProductRef=SJASP-4.0.3-OTH-G-TP@CDS-C DS_SMI
Sun Java System Active Server Pages (ASP) Server 4.0.2
-
Sun Sun Java System Active Server Pages 4.0.3
https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_SMI-Site/en_ US/-/USD/ViewProductDetail-Start?ProductRef=SJASP-4.0.3-OTH-G-TP@CDS-C DS_SMI
References
Sun Java ASP Server Multiple Directory Traversal Vulnerabilities
References:
References:
- Java System Active Server Pages Homepage (Sun)
- Sun Java System Active Server Pages Multiple Directory Traversal Vulnerabilities (iDefense Labs)
- iDefense Security Advisory 06.03.08: Sun Java System Active Server Pages Multip (iDefense Labs
) - Multiple Security Vulnerabilities in Sun Java ASP Server may lead to execution o (Sun)