OSVDB ID: 34992

Title: webMethods Glue Management Console resource Variable Traversal Arbitrary File Access

Info

Disclosure

Apr 11, 2007

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Unknown or Incomplete

Classification

Attack Type: Input Manipulation

Solution

Unknown or Incomplete

Products

Unknown or Incomplete

References

FrSIRT Advisory: ADV-2007-1363
Bugtraq ID: 23423
Other Advisory URL: http://www.aushack.com/200704-webmethods.txt
Secunia Advisory ID: 24933
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-04/0164.html
http://archives.neohapsis.com/archives/bugtraq/2007-04/0271.html
http://archives.neohapsis.com/archives/bugtraq/2007-05/0084.html
CVE ID: 2007-2048 (see also: NVD)
Security Tracker: 1017926

Credit

Patrick Webster - patrickaushack.com - aushack

Direct URL: http://osvdb.org/36218