IBM Tivoli SecureWay Policy Director Directory Traversal Vulnerability

Bugtraq ID:	3080
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 23 2001 12:00AM
Updated:	Jul 23 2001 12:00AM
Credit:	Discovered and posted to Bugtraq by [email protected] (Patrik Karlsson) on July 23, 2001.
Vulnerable:	IBM Tivoli SecureWay Policy Director 3.7.1 - HP HP-UX 11.0 - IBM AIX 4.3.3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 7.0 IBM Tivoli SecureWay Policy Director 3.7 - HP HP-UX 11.0 - IBM AIX 4.3.3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 7.0 IBM Tivoli SecureWay Policy Director 3.6 - HP HP-UX 11.0 - IBM AIX 4.3.3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 7.0 IBM Tivoli SecureWay Policy Director 3.0.1 - HP HP-UX 11.0 - IBM AIX 4.3 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows NT 4.0 SP6a - Microsoft Windows NT 4.0 SP6 - Microsoft Windows NT 4.0 SP5 - Microsoft Windows NT 4.0 SP4 - Microsoft Windows NT 4.0 SP3 - Microsoft Windows NT 4.0 SP2 - Microsoft Windows NT 4.0 SP1 - Microsoft Windows NT 4.0 - Sun Solaris 8_sparc - Sun Solaris 7.0
Not Vulnerable:

IBM Tivoli SecureWay Policy Director Directory Traversal Vulnerability

It is possible for a remote user to traverse the directories of a host running IBM Tivoli SecureWay Policy Director. Submitting a specially crafted URL using hex encoded 'double dot' sequences will reveal arbitrary directories. In addition to revealing directories, this vulnerability could enable a user to obtain the contents of files readable by the webserver user.

IBM Tivoli SecureWay Policy Director Directory Traversal Vulnerability

Currently the SecurityFocus staff are not aware of any exploits for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.