Sun Java System Web Server WebDAV Request Remote File Disclosure Vulnerability

Bugtraq ID:	39187
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Apr 03 2010 12:00AM
Updated:	Apr 03 2010 12:00AM
Credit:	Kingcope
Vulnerable:	Sun Java System Web Server 7.0 Update 4
Not Vulnerable:

Sun Java System Web Server WebDAV Request Remote File Disclosure Vulnerability

Sun Java System Web Server is prone to a remote file-disclosure vulnerability.

An attacker can exploit this vulnerability to view the source code of files in the context of the server process. This may aid in further attacks.

Sun Java System Web Server 7.0 Update 4 is affected; other versions may also be vulnerable.

Sun Java System Web Server WebDAV Request Remote File Disclosure Vulnerability

The following exploit code is available:

• /data/vulnerabilities/exploits/39187.pl

Sun Java System Web Server WebDAV Request Remote File Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Sun Java System Web Server WebDAV Request Remote File Disclosure Vulnerability

References:

• Sun Java System Web Server (Sun Microsystems)