IBM Java UTF8 Byte Sequences Security Bypass Vulnerability

Bugtraq ID:	41918
Class:	Access Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Jul 23 2010 12:00AM
Updated:	Jul 23 2010 12:00AM
Credit:	IBM
Vulnerable:	IBM Java SE 6.0 SR7 IBM Java SE 6.0 SR6 IBM Java SE 6.0 SR5 IBM Java SE 5.0 SR11 PF1 IBM Java SE 5.0 SR11 IBM Java SE 5.0 SR10 IBM Java SDK 1.4.2 SR3 IBM Java SDK 1.4.2 IBM Java SDK 1.4.2 SR13-FP2 IBM Java SDK 1.4.2 SR13-FP1
Not Vulnerable:	IBM Java SE 6.0.0 SR9 IBM Java SE 5.0.0 SR12 IBM Java SDK 1.4.2 SR13-FP6

IBM Java UTF8 Byte Sequences Security Bypass Vulnerability

IBM Java is prone to a security-bypass vulnerability because it fails to sufficiently sanitize user-supplied input.

Successful exploits can allow attackers to bypass filtering mechanisms; this may aid in further attacks.

Versions prior to IBM Java SDK 1.4.2 SR13-FP6, Java SE 5.0.0-SR12, and Java SE 6.0.0-SR9 are vulnerable.

IBM Java UTF8 Byte Sequences Security Bypass Vulnerability

Specific exploit code will depend on the application being compromised.
An attacker can most likely exploit this issue by enticing an unsuspecting user into visiting a malicious webpage.

The following example URI's are available:

http://www.example.com/ctx/index%c0%aehtml
http://www.example.com/ctx/index.%c1%bfj%c1%bfs%c1%bfp%c1%bf

IBM Java UTF8 Byte Sequences Security Bypass Vulnerability

Solution:
Updates are available. Please see the references for more information.

IBM Java UTF8 Byte Sequences Security Bypass Vulnerability

References:

• IBM Homepage (IBM)
  
• IZ80870: REPLACING THE ILLEGAL UTF8 BYTE SEQUENCES WITH \UFFFD. (IBM)
  
• IZ80871: REPLACING THE ILLEGAL UTF8 BYTE SEQUENCES WITH \UFFFD. (IBM)
  
• PM18989: REPLACING THE ILLEGAL UTF8 BYTE SEQUENCES WITH \UFFFD. (IBM)