ManageEngine DesktopCentral 'AgentLogUploadServlet' Directory Traversal Vulnerability

Bugtraq ID:	63784
Class:	Input Validation Error
CVE:	CVE-2013-7390
Remote:	Yes
Local:	No
Published:	Nov 18 2013 12:00AM
Updated:	Sep 02 2014 12:05AM
Credit:	Thomas Hibbert
Vulnerable:
Not Vulnerable:

ManageEngine DesktopCentral 'AgentLogUploadServlet' Directory Traversal Vulnerability

ManageEngine DesktopCentral is prone to a directory-traversal vulnerability because it fails to properly sanitize user-supplied input.

Remote attackers can use specially crafted requests with directory-traversal sequences ('../') to create or overwrite arbitrary files in the context of the application. This may aid in further attacks.

ManageEngine DesktopCentral 8.0.0 build 80286 and prior are vulnerable.

ManageEngine DesktopCentral 'AgentLogUploadServlet' Directory Traversal Vulnerability

An attacker can exploit this issue using a web browser.

The following example data and metasploit exploit module are available:

• /data/vulnerabilities/exploits/63784.txt
• /data/vulnerabilities/exploits/63784.rb

ManageEngine DesktopCentral 'AgentLogUploadServlet' Directory Traversal Vulnerability

Solution:
Reportedly the issue is fixed, however Symantec has not confirmed this. Please contact the vendor for more information.

ManageEngine DesktopCentral 'AgentLogUploadServlet' Directory Traversal Vulnerability

References: