CVE-2008-5116: Path Traversal
First published: Tue Nov 18 2008(Updated: )
Directory traversal vulnerability in idm/includes/helpServer.jsp in Sun Java System Identity Manager 6.0 through 6.0 SP4, 7.0, and 7.1 allows remote attackers to read arbitrary files in the filesystem of the IDM server via directory traversal sequences in the ext parameter.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Sun Java System Identity Manager | =6.0-sp2 | |
| Sun Java System Identity Manager | =7.0 | |
| Sun Java System Identity Manager | =6.0-sp1 | |
| Sun Java System Identity Manager | =7.1 | |
| Sun Java System Identity Manager | =6.0-sp3 | |
| Sun Java System Identity Manager | =6.0-sp4 | |
| Sun Java System Identity Manager | =6.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- http://secunia.com/advisories/32606
- http://sunsolve.sun.com/search/document.do?assetkey=1-26-243386-1
- http://www.securityfocus.com/bid/32262
- http://www.procheckup.com/Vulnerability_PR08-09.php
- http://osvdb.org/49767
- http://www.securitytracker.com/id?1021170
- http://www.vupen.com/english/advisories/2008/3128
- https://exchange.xforce.ibmcloud.com/vulnerabilities/46554
- http://www.securityfocus.com/archive/1/498487/100/0/threaded
Frequently Asked Questions
What is the severity of CVE-2008-5116?
CVE-2008-5116 is considered a critical vulnerability as it allows remote attackers to read arbitrary files on the server.
How do I fix CVE-2008-5116?
To mitigate CVE-2008-5116, upgrade to a patched version of Sun Java System Identity Manager as recommended by the vendor.
What versions of Sun Java System Identity Manager are affected by CVE-2008-5116?
CVE-2008-5116 affects versions 6.0 SP1 to SP4, and versions 7.0 and 7.1 of Sun Java System Identity Manager.
Can CVE-2008-5116 be exploited remotely?
Yes, CVE-2008-5116 can be exploited remotely, allowing attackers to access sensitive files on the server.
What are the potential impacts of exploiting CVE-2008-5116?
Exploitation of CVE-2008-5116 can lead to unauthorized access to sensitive information stored in files on the server.
- collector/nvd-historical
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/author
- agent/tags
- agent/remedy
- agent/references
- agent/severity
- agent/last-modified-date
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- vendor/sun
- canonical/sun java system identity manager
- version/sun java system identity manager/6.0-sp2
- version/sun java system identity manager/7.0
- version/sun java system identity manager/6.0-sp1
- version/sun java system identity manager/7.1
- version/sun java system identity manager/6.0-sp3
- version/sun java system identity manager/6.0-sp4
- version/sun java system identity manager/6.0