Oracle Application Server 10g (10.1.3.1.0) Oracle HTTP Server

QQ空间 新浪微博 微信 QQ facebook twitter
漏洞ID 1052276 漏洞类型
发布时间 2009-01-22 更新时间 2009-01-22
CVE编号 N/A CNNVD-ID N/A
漏洞平台 N/A CVSS评分 N/A
|漏洞来源
https://cxsecurity.com/issue/WLB-2009010056
|漏洞详情
漏洞细节尚未披露
|漏洞EXP
Server Version Info: Oracle-Application-Server-10g/10.1.3.1.0 Oracle-HTTP-Server
PoC: http://OC4J/web-app/foobar/%c0%ae%c0%ae/WEB-INF/web.xml
Related: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-2938
Explaination: The "%c0%ae%c0%ae" is interpreted as: ".." because on
Java's side: "%c0%ae" is interpreted as: "uC0AE" that get's casted to
an ASCII-LOW char, that is: ".".

You can read dangerous configuration information including passwords,
users, paths, etc..
Discovered: 8/16/08
Vendor contacted: 8/16/08
Vendor response: 8/18/08
Vendor reproduced the issue: 9/10/08
Vendor last contact: 9/30/08
Public Disclosure: 1/19/09

Oracle security bug id: 7391479

For more information contact Oracle Security Team: secalert_us_at_oracle.com

I really wanted to give a link to a patch, but I think it's better if
this is known by sysadmins so they can filter this using an IDS.

Greetings!!

-- Eduardo
http://www.sirdarckcat.net/