Computer Associates Oneview Monitor 'doSave.jsp' Remote Code Execution Vulnerability

Bugtraq ID:	42413
Class:	Input Validation Error
CVE:
Remote:	Yes
Local:	No
Published:	Aug 12 2010 12:00AM
Updated:	Aug 12 2010 12:00AM
Credit:	Giorgio Fedon
Vulnerable:	Computer Associates Oneview Monitor 0 Computer Associates Netegrity Siteminder Policy Manager 6.0
Not Vulnerable:

Computer Associates Oneview Monitor 'doSave.jsp' Remote Code Execution Vulnerability

Computer Associates Oneview Monitor is prone to a remote code-execution vulnerability because the application fails to sufficiently sanitize user-supplied input.

Exploiting this issue will allow an attacker to inject and execute arbitrary JSP code in the context of the affected webserver.

Computer Associates Oneview Monitor 'doSave.jsp' Remote Code Execution Vulnerability

Attackers can exploit this issue through a browser.

The following example URI is available:

ttp://www.example.com/sitemindermonitor/doSave.jsp?file=../attacksample.jsp

Computer Associates Oneview Monitor 'doSave.jsp' Remote Code Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Computer Associates Oneview Monitor 'doSave.jsp' Remote Code Execution Vulnerability

References:

• Computer Associates Homepage (Computer Associates)
  
• Minded Security Labs: Advisory #MSA100410 (Giorgio Fedon)