PT-2008-3162 · Elastic Path · Path

Publicado 2008-04-01 · Atualizado 2018-08-13 · CVE-2008-1606

Positive Technologies (AI Summary)

CVSS v2.0

6.0

Média

Vetor base

AV:N/AC:M/Au:S/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Elastic Path versions 4.1 through 4.1.1

Description The issue allows remote attackers to exploit multiple directory traversal vulnerabilities. This can be achieved by (1) downloading arbitrary files via a .. (dot dot) in the file parameter to "manager/getImportFileRedirect.jsp", (2) uploading arbitrary files via a ".." (dot dot backslash) in the file parameter to "importData.jsp", and (3) listing directory contents via a .. (dot dot) in the dir parameter to "manager/fileManager.jsp".

Recommendations For Elastic Path versions 4.1 through 4.1.1, consider restricting access to the "manager/getImportFileRedirect.jsp", "importData.jsp", and "manager/fileManager.jsp" endpoints until a patch is available. As a temporary workaround, avoid using the file and dir parameters in the affected API endpoints. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Path traversal

Enumeração de Fraquezas

CWE-22

Identificadores relacionados

CVE-2008-1606

Produtos afetados

Path

Referências · 10

• 🔥 https://exploit-db.com/exploits/31446 · Exploit
• 🔥 https://exploit-db.com/exploits/31445 · Exploit
• 🔥 http://mwrinfosecurity.com/publications/mwri_elastic-path-arbitrary-file-system-access_2008-02-22.pdf · Exploit
• http://securityfocus.com/bid/28352 · Nota
• http://developer.elasticpath.com/entry%21default.jspa?categoryID=4&externalID=1334 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2008-1606 · Nota de Segurança
• http://weblog.nomejortu.com/?p=37 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41356 · Nota
• http://secunia.com/advisories/29496 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/41364 · Nota