PT-2004-1369 · Sap · Business Objects Crystal Reports+1

Amichai Shulman + 1 · Published 2004-06-11 · Updated 2018-10-12 · CVE-2004-0204

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Business Objects Crystal Reports versions 9 and 10 Crystal Enterprise versions 9 and 10

Description A directory traversal issue exists in the web viewers for the mentioned products, allowing remote attackers to read and delete arbitrary files. This is achieved by using ".." sequences in the dynamicimag argument to the "crystalimagehandler.aspx" API endpoint.

Recommendations For Business Objects Crystal Reports versions 9 and 10, and Crystal Enterprise versions 9 and 10, consider restricting access to the "crystalimagehandler.aspx" API endpoint until a patch is available. As a temporary workaround, avoid using the dynamicimag argument in the "crystalimagehandler.aspx" API endpoint to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2004-0204

Affected Products

Business Objects Crystal Reports

Crystal Enterprise

References · 12

• 🔥 https://exploit-db.com/exploits/24077 · Exploit
• 🔥 http://securityfocus.com/bid/10260 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-0204 · Security Note
• https://docs.microsoft.com/en-us/security-updates/securitybulletins/2004/ms04-017 · Vendor Advisory
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1157 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16044 · Note
• http://marc.info/?l=bugtraq&m=108360413811017&w=2 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-0204 · Note
• http://support.businessobjects.com/fix/hot/critical/bulletins/security_bulletin_june04.asp · Note
• http://secunia.com/advisories/11800 · Note
• http://osvdb.org/6748 · Note
• http://marc.info/?l=bugtraq&m=108671836127360&w=2 · Note