IBM WebSphere Application Server File Permission Vulnerability
BID:34358
Info
IBM WebSphere Application Server File Permission Vulnerability
| Bugtraq ID: | 34358 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Apr 02 2009 12:00AM |
| Updated: | Apr 03 2009 04:26PM |
| Credit: | IBM |
| Vulnerable: |
IBM Websphere Application Server 7.0 3 IBM Websphere Application Server 6.1.2 IBM Websphere Application Server 6.1 .9 IBM Websphere Application Server 6.1 .8 IBM Websphere Application Server 6.1 .7 IBM Websphere Application Server 6.1 .6 IBM Websphere Application Server 6.1 .5 IBM Websphere Application Server 6.1 .4 IBM Websphere Application Server 6.1 .3 IBM Websphere Application Server 6.1 .23 IBM Websphere Application Server 6.1 .22 IBM Websphere Application Server 6.1 .21 IBM Websphere Application Server 6.1 .20 IBM Websphere Application Server 6.1 .2 IBM Websphere Application Server 6.1 .19 IBM Websphere Application Server 6.1 .18 IBM Websphere Application Server 6.1 .17 IBM Websphere Application Server 6.1 .15 IBM Websphere Application Server 6.1 .14 IBM Websphere Application Server 6.1 .13 IBM Websphere Application Server 6.1 .12 IBM Websphere Application Server 6.1 .11 IBM Websphere Application Server 6.1 .10 IBM Websphere Application Server 6.1 .1 IBM Websphere Application Server 6.1 IBM Websphere Application Server 6.0.2 .9 IBM Websphere Application Server 6.0.2 .7 IBM Websphere Application Server 6.0.2 .5 IBM Websphere Application Server 6.0.2 .33 IBM Websphere Application Server 6.0.2 .31 IBM Websphere Application Server 6.0.2 .3 IBM Websphere Application Server 6.0.2 .29 IBM Websphere Application Server 6.0.2 .25 IBM Websphere Application Server 6.0.2 .24 IBM Websphere Application Server 6.0.2 .23 IBM Websphere Application Server 6.0.2 .22 IBM Websphere Application Server 6.0.2 .21 IBM Websphere Application Server 6.0.2 .19 IBM Websphere Application Server 6.0.2 .17 IBM Websphere Application Server 6.0.2 .15 IBM Websphere Application Server 6.0.2 .13 IBM Websphere Application Server 6.0.2 .11 IBM Websphere Application Server 6.0.2 .1 IBM Websphere Application Server 6.0.2 IBM Websphere Application Server 6.0.1 IBM Websphere Application Server 6.0 IBM Websphere Application Server 7.0.0.1 IBM Websphere Application Server 7.0 IBM Websphere Application Server 6.2 |
| Not Vulnerable: | |
Discussion
IBM WebSphere Application Server File Permission Vulnerability
IBM WebSphere Application Server (WAS) is prone to a file-permission security issue.
An attacker can exploit the file-permission issue to obtain write access to certain files, which could affect system integrity and lead to other attacks.
Note that this issue may be related to BID 34259.
This issue affects WAS 7.0.0.3 and earlier.
IBM WebSphere Application Server (WAS) is prone to a file-permission security issue.
An attacker can exploit the file-permission issue to obtain write access to certain files, which could affect system integrity and lead to other attacks.
Note that this issue may be related to BID 34259.
This issue affects WAS 7.0.0.3 and earlier.
Exploit / POC
IBM WebSphere Application Server File Permission Vulnerability
Attackers can use readily available tools and standard commands to exploit this issue.
Attackers can use readily available tools and standard commands to exploit this issue.
Solution / Fix
IBM WebSphere Application Server File Permission Vulnerability
Solution:
The vendor has released fixes. Please see the references for more information.
Solution:
The vendor has released fixes. Please see the references for more information.
References
IBM WebSphere Application Server File Permission Vulnerability
References:
References: