HTTP: Crystal Reports Directory Traversal

This signature detects attempts to exploit a known vulnerability in Microsoft Crystal Reports. Users of Visual Studio .NET 2003, Outlook 2003 with Business Contact Manager, or Microsoft Business Solutions Customer Relationship Management (CRM) 1.2 are affected. Attackers can send a malformed URL to the server to read or write to any file on the server.

Extended Description

Crystal Reports and Crystal Enterprise Web Form Viewer is prone to a directory traversal vulnerability. This issue can allow an attacker to retrieve and delete files, allowing for information disclosure and denial of service attacks. An attacker can exploit this issue by sending directory traversal sequences and requesting a file through a vulnerable parameter of one of the affected modules. Microsoft Visual Studio .NET 2003, Outlook 2003 with Business Contact Manager, and Business Solutions CRM 1.2 are also vulnerable to this issue as Microsoft re-distributes Crystal Reports.

Affected Products

Bea_systems weblogic_express_for_win32

References

BugTraq: 10260

CVE: CVE-2004-0204

URL: http://www.microsoft.com/technet/security/bulletin/MS04-017.mspx http://securitytracker.com/alerts/2004/Jun/1010429.html

Short Name

HTTP:DIR:CRYSTAL-REPORTS

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Crystal Reports Directory Traversal

Extended Description

Affected Products

References

Found a potential security threat?