JavaServer Web Development Kit v1.0 Directory Traversal Vulnerability
BID:3211
Info
JavaServer Web Development Kit v1.0 Directory Traversal Vulnerability
| Bugtraq ID: | 3211 |
| Class: | Input Validation Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 28 2001 12:00AM |
| Updated: | Mar 28 2001 12:00AM |
| Credit: | This vulnerability was reported by lovehacker <[email protected]> |
| Vulnerable: |
Sun JavaServer Web Development Kit 1.0.1 |
| Not Vulnerable: | |
Discussion
JavaServer Web Development Kit v1.0 Directory Traversal Vulnerability
JavaServer Web Development Kit has a Web container for developing and testing JavaServer Pages and the Java Servlet API.
Version 1.0 of the JSWDK contains a directory traversal vulnerability. Through requesting URLS containing '../' character sequences, remote clients can view arbitrary files (outside of the webroot) on the host system.
This could allow an attacker to obtain sensitive or confidential information which could be used to mount further attacks upon the host.
Phuong Nguyen <[email protected]> reported that on Unix
systems, the JSWDK webserver runs with root privileges.
On Unix systems, an attacker may be able to gain access to a host by brute forcing the hashes in '/etc/shadow', a file which may be obtainable remotely using this vulnerability.
JavaServer Web Development Kit has a Web container for developing and testing JavaServer Pages and the Java Servlet API.
Version 1.0 of the JSWDK contains a directory traversal vulnerability. Through requesting URLS containing '../' character sequences, remote clients can view arbitrary files (outside of the webroot) on the host system.
This could allow an attacker to obtain sensitive or confidential information which could be used to mount further attacks upon the host.
Phuong Nguyen <[email protected]> reported that on Unix
systems, the JSWDK webserver runs with root privileges.
On Unix systems, an attacker may be able to gain access to a host by brute forcing the hashes in '/etc/shadow', a file which may be obtainable remotely using this vulnerability.
Exploit / POC
JavaServer Web Development Kit v1.0 Directory Traversal Vulnerability
This vulnerability can be exploited with a web browser.
This vulnerability can be exploited with a web browser.
Solution / Fix
JavaServer Web Development Kit v1.0 Directory Traversal Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.