NewAtlanta ServletExec/ISAPI File Disclosure Vulnerability
BID:4795
Info
NewAtlanta ServletExec/ISAPI File Disclosure Vulnerability
| Bugtraq ID: | 4795 |
| Class: | Input Validation Error |
| CVE: |
CVE-2002-0893 CVE-2002-0893 |
| Remote: | Yes |
| Local: | No |
| Published: | May 22 2002 12:00AM |
| Updated: | Mar 19 2015 09:08AM |
| Credit: | Discovery of this issue is credited to Matt Moore <[email protected]>. |
| Vulnerable: |
NewAtlanta ServletExec/ISAPI 4.1 |
| Not Vulnerable: | |
Discussion
NewAtlanta ServletExec/ISAPI File Disclosure Vulnerability
ServletExec/ISAPI is a plug-in Java Servlet/JSP engine for Microsoft IIS. It runs with IIS on Microsoft Windows NT/2000/XP systems.
ServletExec/ISAPI will disclose the contents of arbitrary files within the webroot directory by sending a request containing URL encoded directory traversal sequences. While this will cause the software to serve files within wwwroot that normally would not be served, it does not appear possible to exploit this condition to break out of the webroot.
ServletExec/ISAPI is a plug-in Java Servlet/JSP engine for Microsoft IIS. It runs with IIS on Microsoft Windows NT/2000/XP systems.
ServletExec/ISAPI will disclose the contents of arbitrary files within the webroot directory by sending a request containing URL encoded directory traversal sequences. While this will cause the software to serve files within wwwroot that normally would not be served, it does not appear possible to exploit this condition to break out of the webroot.
Exploit / POC
NewAtlanta ServletExec/ISAPI File Disclosure Vulnerability
This issue may be exploited with a web browser. The following example may be used to disclose the contents of 'global.asa', which is ordinarily restricted from being served by the software:
http://target/servlet/com.newatlanta.servletexec.JSP10Servlet/..%5c..%5c\global.asa
This issue may be exploited with a web browser. The following example may be used to disclose the contents of 'global.asa', which is ordinarily restricted from being served by the software:
http://target/servlet/com.newatlanta.servletexec.JSP10Servlet/..%5c..%5c\global.asa
Solution / Fix
NewAtlanta ServletExec/ISAPI File Disclosure Vulnerability
Solution:
The vendor has released a fix which addresses this issue.
NewAtlanta ServletExec/ISAPI 4.1
Solution:
The vendor has released a fix which addresses this issue.
NewAtlanta ServletExec/ISAPI 4.1
-
NewAtlanta ServletExec_4_1p9.zip
ftp://ftp.newatlanta.com/public/4_1/patches/
References
NewAtlanta ServletExec/ISAPI File Disclosure Vulnerability
References:
References:
- NewAtlanta Homepage (NewAtlanta)