CVE-2009-1873

Currently unrated

Key Information:

Vendor
Adobe
Status
Jrun
Vendor
CVE Published:
18 August 2009

Summary

Directory traversal vulnerability in logging/logviewer.jsp in the Management Console in Adobe JRun Application Server 4 Updater 7 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the logfile parameter.

References

https://www.exploit-db.com/exploits/9443
exploitx_refsource_EXPLOIT-DB
http://www.securityfocus.com/archive/1/505808/100/0/threaded
mailing-listx_refsource_BUGTRAQ
http://www.adobe.com/support/security/bulletins/apsb09-12...
x_refsource_CONFIRM

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.