IBM Tivoli Access Manager 6.1.1 for E-Business – Directory Traversal

• Exploit Database
• 282 阅读

• 作者： anonymous
  日期： 2010-12-24
• 类别：

  • remote
  平台：

  • linux
• 来源：https://www.exploit-db.com/exploits/35148/
• 1 2 3 4 5 6 7 8 9 10

  source: https://www.securityfocus.com/bid/45582/info   IBM Tivoli Access Manager for e-business is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.   Exploiting this issue will allow an attacker to view arbitrary local files within the context of the webserver. Information harvested may aid in launching further attacks.   IBM Tivoli Access Manager for e-business 6.1.1 is vulnerable.   http://www.example.com/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/etc/passwd