PT-2004-1369 · Sap · Business Objects Crystal Reports+1

Amichai Shulman + 1 · Publicado 2004-06-11 · Atualizado 2018-10-12 · CVE-2004-0204

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Business Objects Crystal Reports versions 9 and 10 Crystal Enterprise versions 9 and 10

Description A directory traversal issue exists in the web viewers for the mentioned products, allowing remote attackers to read and delete arbitrary files. This is achieved by using ".." sequences in the dynamicimag argument to the "crystalimagehandler.aspx" API endpoint.

Recommendations For Business Objects Crystal Reports versions 9 and 10, and Crystal Enterprise versions 9 and 10, consider restricting access to the "crystalimagehandler.aspx" API endpoint until a patch is available. As a temporary workaround, avoid using the dynamicimag argument in the "crystalimagehandler.aspx" API endpoint to minimize the risk of exploitation.

Exploit

Correção

Identificadores relacionados

CVE-2004-0204

Produtos afetados

Business Objects Crystal Reports

Crystal Enterprise

Referências · 12

• 🔥 https://exploit-db.com/exploits/24077 · Exploit
• 🔥 http://securityfocus.com/bid/10260 · Exploit
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1157 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16044 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-0204 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=108360413811017&w=2 · Nota
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0204 · Nota
• http://support.businessobjects.com/fix/hot/critical/bulletins/security_bulletin_june04.asp · Nota
• http://secunia.com/advisories/11800 · Nota
• http://osvdb.org/6748 · Nota
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-017 · Aviso do Fabricante
• http://marc.info/?l=bugtraq&m=108671836127360&w=2 · Nota