Apache Solr 'SolrResourceLoader' Directory Traversal Vulnerability

Bugtraq ID:	63935
Class:	Input Validation Error
CVE:	CVE-2013-6397
Remote:	Yes
Local:	No
Published:	Nov 26 2013 12:00AM
Updated:	Jun 18 2014 12:04AM
Credit:	Uwe Schindler
Vulnerable:	Debian Linux 6.0 sparc Debian Linux 6.0 s/390 Debian Linux 6.0 powerpc Debian Linux 6.0 mips Debian Linux 6.0 ia-64 Debian Linux 6.0 ia-32 Debian Linux 6.0 arm Debian Linux 6.0 amd64
Not Vulnerable:

Apache Solr 'SolrResourceLoader' Directory Traversal Vulnerability

Apache Solr is prone to a directory-traversal vulnerability.

A remote attacker could exploit the vulnerability using directory-traversal characters ('../') to access arbitrary files that contain sensitive information. Under certain circumstances, attackers may also be able to execute arbitrary code by uploading arbitrary files to the affected server.

Apache Solr 'SolrResourceLoader' Directory Traversal Vulnerability

An attacker can use readily available tools to exploit this issue.

The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.

Apache Solr 'SolrResourceLoader' Directory Traversal Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apache Solr 'SolrResourceLoader' Directory Traversal Vulnerability

References: