|
Brought to you by:
Suppliers of:
|
|
|
| |
| A potential security vulnerability has been discovered in Oracle's JSP Releases 1.0.x through 1.0.2 when using Oracle Apache/JServ. This vulnerability permits the execution of unintended (or incorrect) JSP files. |
| |
Credit:
The information has been provided by Oracle Security Alerts.
|
| |
Vulnerable systems:
Oracle8i, Release version 8.1.7
Internet Application Server, iAS, Releases version 1.0.0, 1.0.1 and 1.0.2
Due to a bug in Apache/Jserv path translation, any URL that looks like: http://host:port/servlets/a.jsp, makes Oracle JSP execute "d:\servlets\a.jsp" if such a directory path actually exists. Thus, a URL virtual path, an actual directory path and the Oracle JSP name (when using Oracle Apache/JServ) must match for this potential vulnerability to occur.
Solution:
Ensure that the virtual path in a URL is different from the actual directory path when using Oracle Apache/JServ. Also, do not use the <servletzonepath> directory in "ApJServMount <servletzonepath> <servletzone>" to store data or files.
A bug fix will be developed for Oracle Apache/JServ and available in the next release of iAS.
|
|
|
|
|
