Advanced Software Engineering ChartDirector 'cacheId' Parameter Directory Traversal Vulnerability

Bugtraq ID:	36300
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Sep 08 2009 12:00AM
Updated:	Mar 22 2010 01:22PM
Credit:	DokFLeed
Vulnerable:	Advanced Software Engineering ChartDirector 5.0
Not Vulnerable:	Advanced Software Engineering ChartDirector 5.0.2

Advanced Software Engineering ChartDirector 'cacheId' Parameter Directory Traversal Vulnerability

ChartDirector is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input data.

Exploiting the issue may allow an attacker to obtain sensitive information that could aid in further attacks.

ChartDirector 5.0 is vulnerable; other versions may also be affected.

Advanced Software Engineering ChartDirector 'cacheId' Parameter Directory Traversal Vulnerability

An attacker can exploit this issue via a browser.

Advanced Software Engineering ChartDirector 'cacheId' Parameter Directory Traversal Vulnerability

Solution:
The vendor released updates to address this issue. Please see the references for more information.

Advanced Software Engineering ChartDirector 'cacheId' Parameter Directory Traversal Vulnerability

References:

• ChartDirector Critical File Access (DokFLeed)
  
• ChartDirector Homepage (Advanced Software Engineering)
  
• ChartDirector Ver 5.0.2 Release Notes (Advanced Software Engineering)