Detections
Analytics
Sun Java System Identity Manager ext Parameter Arbitrary File Retrieval
high Nessus Plugin ID 38695
Language:
Synopsis
The remote web server contains an application that allows arbitrary file retrieval.Description
The version of Sun Java System Identity Manager hosted on the remote web server fails to sanitize user-supplied input to 'ext' parameter in file 'includes/helpServer.jsp' before using it to display help files. An unauthenticated attacker can exploit this vulnerability to retrieve arbitrary files from the remote system.Note that this installation is likely affected by several other issues as documented in Sun's advisory, although Nessus has not checked for them.
Solution
Apply vendor-supplied patches.See Also
http://www.procheckup.com/vulnerability_manager/vulnerabilities/pr08-09
Plugin Details
Severity: High
ID: 38695
File Name: sun_idm_ext_file_retrieval.nasl
Version: 1.22
Type: remote
Family: CGI abuses
Published: 5/6/2009
Updated: 4/11/2022
Configuration: Enable thorough checks
Supported Sensors: Nessus
Risk Information
VPR
Risk Factor: Medium
Score: 4.4
CVSS v2
Risk Factor: High
Base Score: 7.8
Temporal Score: 5.8
Vector: CVSS2#AV:N/AC:L/Au:N/C:C/I:N/A:N
Vulnerability Information
CPE: cpe:/a:sun:java_system_identity_manager
Excluded KB Items: Settings/disable_cgi_scanning
Exploit Ease: No exploit is required
Exploited by Nessus: true
Patch Publication Date: 4/25/2008
Reference Information
CVE: CVE-2008-5116
BID: 32262