BlueDragon CFChart Servlet CVE-2014-5370 Arbitrary File Download Vulnerability

Bugtraq ID:	74201
Class:	Input Validation Error
CVE:	CVE-2014-5370
Remote:	Yes
Local:	No
Published:	Mar 06 2015 12:00AM
Updated:	Mar 06 2015 12:00AM
Credit:	Mike Westmacott
Vulnerable:	New Atlanta BlueDragon CFChart Servlet 7.1.1.17759
Not Vulnerable:	New Atlanta BlueDragon CFChart Servlet 7.1.1.18527

BlueDragon CFChart Servlet CVE-2014-5370 Arbitrary File Download Vulnerability

BlueDragon CFChart Servlet is prone to an arbitrary file-download vulnerability because the application fails to sufficiently sanitize user-supplied input.

An attacker can exploit this issue to download and delete arbitrary files within the context of the web server process. Information obtained may aid in further attacks.

BlueDragon CFChart Servlet 7.1.1.17759 is vulnerable; other versions may also be affected.

BlueDragon CFChart Servlet CVE-2014-5370 Arbitrary File Download Vulnerability

Attackers can use a browser to exploit this issue.

The following example URI is available:

www.example.com/cfchart.cfchart?..\..\..\..\..\..\..\..\..\..\TARGETFILE

BlueDragon CFChart Servlet CVE-2014-5370 Arbitrary File Download Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

BlueDragon CFChart Servlet CVE-2014-5370 Arbitrary File Download Vulnerability

References:

• NewAtlanta Homepage (NewAtlanta)
  
• Vulnerability title: Arbitrary File Retrieval + Deletion in New Atlanta BlueDrag (portcullis)