Business Objects Crystal Reports Web Form Viewer Directory Traversal Vulnerability

Business Objects Crystal Reports Web Form Viewer Directory Traversal Vulnerability

Solution:
BEA Systems has released advisory BEA04-63.00 to address this issue. Users of the WebLogic platform are advised to apply the appropriate Business Objects updates for this vulnerability. Fixes have also been included in WebLogic 8.1 SP 3.

Business Objects has released a security bulletin to address this issue.

Microsoft Security Bulletin MS04-017 is available to address this issue.

Microsoft Visual Studio .NET 2003

Microsoft Visual Studio .NET 2003 Crystal Reports Security Update
http://www.microsoft.com/downloads/details.aspx?FamilyId=659CA40E-808D -431D-A7D3-33BC3ACE922D&displaylang=en

Borland J Builder

Business Objects cr10jbuilder_critical_update_win.zip
For Windows.
ftp://ftp1.businessobjects.com/outgoing/ehf/CriticalUpdate/cr10jbuilde r_critical_update_win.zip

Business Objects crjbuilder10critical_update_lnx.tar.gz
For Linux.
ftp://ftp1.businessobjects.com/outgoing/ehf/CriticalUpdate/crjbuilder1 0critical_update_lnx.tar.gz

Business Objects crjbuilder10critical_update_sol.tar.gz
For Solaris.
ftp://ftp1.businessobjects.com/outgoing/ehf/CriticalUpdate/crjbuilder1 0critical_update_sol.tar.gz

Microsoft Outlook 2003 with Business Contact Manager

Microsoft Business Contact Manager for Outlook 2003 Security Update: KB842496
http://www.microsoft.com/downloads/details.aspx?FamilyId=9016B9F3-BA86 -4A95-9D89-E120EF2E85E3&displaylang=en

Business Objects Crystal Reports 10.0

Business Objects v10_critical_update_win.zip
For Windows.
ftp://ftp1.businessobjects.com/outgoing/ehf/CriticalUpdate/v10_critica l_update_win.zip

Business Objects Crystal Enterprise 10.0

Business Objects ce10critical_update_aix.tar.gz
For AIX.
ftp://ftp1.businessobjects.com/outgoing/ehf/CriticalUpdate/ce10critica l_update_aix.tar.gz

Business Objects ce10critical_update_sol.tar.gz
For Solaris.
ftp://ftp1.businessobjects.com/outgoing/ehf/CriticalUpdate/ce10critica l_update_sol.tar.gz

Business Objects v10_critical_update_win.zip
For Windows.
ftp://ftp1.businessobjects.com/outgoing/ehf/CriticalUpdate/v10_critica l_update_win.zip

BEA Systems Weblogic Server 8.1 SP 1

Business Objects bea81_critical_update_unix.tar.gz
For Linux.
ftp://ftp1.businessobjects.com/outgoing/ehf/CriticalUpdate/bea81_criti cal_update_unix.tar.gz

Business Objects bea81_critical_update_unix.tar.gz
For Solaris.
ftp://ftp1.businessobjects.com/outgoing/ehf/CriticalUpdate/bea81_criti cal_update_unix.tar.gz

BEA Systems Weblogic Server 8.1 SP 2

Business Objects bea81_critical_update_unix.tar.gz
For Linux.
ftp://ftp1.businessobjects.com/outgoing/ehf/CriticalUpdate/bea81_criti cal_update_unix.tar.gz

Business Objects bea81_critical_update_unix.tar.gz
For Solaris.
ftp://ftp1.businessobjects.com/outgoing/ehf/CriticalUpdate/bea81_criti cal_update_unix.tar.gz

BEA Systems WebLogic Server for Win32 8.1 SP 2

Business Objects bea81_critical_update_win.zip
For Windows.
ftp://ftp1.businessobjects.com/outgoing/ehf/CriticalUpdate/bea81_criti cal_update_win.zip

BEA Systems WebLogic Server for Win32 8.1

Business Objects bea81_critical_update_win.zip
For Windows.
ftp://ftp1.businessobjects.com/outgoing/ehf/CriticalUpdate/bea81_criti cal_update_win.zip

BEA Systems Weblogic Server 8.1

Business Objects bea81_critical_update_unix.tar.gz
For Linux.
ftp://ftp1.businessobjects.com/outgoing/ehf/CriticalUpdate/bea81_criti cal_update_unix.tar.gz

Business Objects bea81_critical_update_unix.tar.gz
For Solaris.
ftp://ftp1.businessobjects.com/outgoing/ehf/CriticalUpdate/bea81_criti cal_update_unix.tar.gz

BEA Systems WebLogic Server for Win32 8.1 SP 1

Business Objects bea81_critical_update_win.zip
For Windows.
ftp://ftp1.businessobjects.com/outgoing/ehf/CriticalUpdate/bea81_criti cal_update_win.zip

Business Objects Crystal Enterprise Java SDK 8.5

Business Objects ce85critical_update_jcesol.tar.gz
For Solaris.
ftp://ftp1.businessobjects.com/outgoing/ehf/CriticalUpdate/ce85critica l_update_jcesol.tar.gz

Business Objects v85_critical_update_win.zip
For Windows.
ftp://ftp1.businessobjects.com/outgoing/ehf/CriticalUpdate/v85_critica l_update_win.zip

Business Objects Crystal Enterprise 9.0

Business Objects v9_critical_update_win.zip
For Windows.
ftp://ftp1.businessobjects.com/outgoing/ehf/CriticalUpdate/v9_critical _update_win.zip