CVE-2008-5116

Directory traversal vulnerability in idm/includes/helpServer.jsp in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to read arbitrary files in the filesystem of the IDM server via directory traversal sequences in the ext parameter.

Link	Resource
http://secunia.com/advisories/32606	Vendor Advisory
http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1	Patch Vendor Advisory
http://www.securityfocus.com/bid/32262	Exploit
http://www.procheckup.com/Vulnerability_PR08-09.php
http://osvdb.org/49767
http://www.securitytracker.com/id?1021170
http://www.vupen.com/english/advisories/2008/3128	Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/46554
http://www.securityfocus.com/archive/1/498487/100/0/threaded

Configuration 1

cpe:2.3:a:sun:java_system_identity_manager:6.0:sp2:*:*:*:*:*:* cpe:2.3:a:sun:java_system_identity_manager:7.0:*:*:*:*:*:*:* cpe:2.3:a:sun:java_system_identity_manager:6.0:sp1:*:*:*:*:*:* cpe:2.3:a:sun:java_system_identity_manager:7.1:*:*:*:*:*:*:* cpe:2.3:a:sun:java_system_identity_manager:6.0:sp3:*:*:*:*:*:* cpe:2.3:a:sun:java_system_identity_manager:6.0:sp4:*:*:*:*:*:* cpe:2.3:a:sun:java_system_identity_manager:6.0:*:*:*:*:*:*:*

---

Published : 2008-11-18 12:30

Updated : 2018-10-11 08:54

---

NVD link : CVE-2008-5116

Mitre link : CVE-2008-5116

No products.

CWE-22