WorkforceROI XPede Weak File Protection Vulnerability
BID:4554
Info
WorkforceROI XPede Weak File Protection Vulnerability
| Bugtraq ID: | 4554 |
| Class: | Design Error |
| CVE: |
CVE-2002-0582 CVE-2002-0583 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 19 2002 12:00AM |
| Updated: | Jul 11 2009 12:46PM |
| Credit: | Discovered by Cerberus Vulgaris <[email protected]>. |
| Vulnerable: |
WorkforceROI Xpede 4.1 |
| Not Vulnerable: | |
Discussion
WorkforceROI XPede Weak File Protection Vulnerability
XPede is web-based project accounting software. It is available for Microsoft Windows operating systems.
When a user submits an expense claim, the file is saved in the world-readable '/reports/temp' directory. By default this directory is indexable. Remote clients may be able to access the temporary reports of other users by accessing this directory.
Furthermore, the files may still be obtained if indexing has been disabled for the '/reports/temp' directory. For security reasons the filenames assigned are partially random. Unfortunately the scheme is weak: the random component of the filename is only 5 bytes in length and limited to alpha-numeric characters. This makes the space of possible filenames relatively small and easily exhausted by an automated guessing utility.
XPede is web-based project accounting software. It is available for Microsoft Windows operating systems.
When a user submits an expense claim, the file is saved in the world-readable '/reports/temp' directory. By default this directory is indexable. Remote clients may be able to access the temporary reports of other users by accessing this directory.
Furthermore, the files may still be obtained if indexing has been disabled for the '/reports/temp' directory. For security reasons the filenames assigned are partially random. Unfortunately the scheme is weak: the random component of the filename is only 5 bytes in length and limited to alpha-numeric characters. This makes the space of possible filenames relatively small and easily exhausted by an automated guessing utility.
Solution / Fix
WorkforceROI XPede Weak File Protection Vulnerability
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution:
Currently the SecurityFocus staff are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.