IBM Tivoli Access Manager 6.1.1 for E-Business – Directory Traversal

• Exploit Database
• 13 阅读

• 作者： anonymous
  日期： 2010-12-24
• 类别：

  • remote
  平台：

  • linux
• 来源：https://www.exploit-db.com/exploits/35148/

• source: https://www.securityfocus.com/bid/45582/info
  
  IBM Tivoli Access Manager for e-business is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.
  
  Exploiting this issue will allow an attacker to view arbitrary local files within the context of the webserver. Information harvested may aid in launching further attacks.
  
  IBM Tivoli Access Manager for e-business 6.1.1 is vulnerable. 
  
  http://www.example.com/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/%uff0e%uff0e/etc/passwd