• info
• discussion
• exploit
• solution
• references

Sun Java ASP Server Multiple Directory Traversal Vulnerabilities

Solution:
The vendor has issued an advisory and updates. Please see the references for more information.


Sun Java System Active Server Pages (ASP) Server 4.0

• Sun Sun Java System Active Server Pages 4.0.3
  https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_SMI-Site/en_ US/-/USD/ViewProductDetail-Start?ProductRef=SJASP-4.0.3-OTH-G-TP@CDS-C DS_SMI

Sun Java System Active Server Pages (ASP) Server 4.0.1

• Sun Sun Java System Active Server Pages 4.0.3
  https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_SMI-Site/en_ US/-/USD/ViewProductDetail-Start?ProductRef=SJASP-4.0.3-OTH-G-TP@CDS-C DS_SMI

Sun Java System Active Server Pages (ASP) Server 4.0.2

• Sun Sun Java System Active Server Pages 4.0.3
  https://cds.sun.com/is-bin/INTERSHOP.enfinity/WFS/CDS-CDS_SMI-Site/en_ US/-/USD/ViewProductDetail-Start?ProductRef=SJASP-4.0.3-OTH-G-TP@CDS-C DS_SMI