Vulnerability Note VU#132099

Jana Server does not adequately validate user input thereby allowing directory traversal

Overview

Jana Server contains a directory traversal vulnerability.

I. Description

Versions 1.4x of Jana Server, a web server for Windows developed by T. Hauck, do not properly filter requests for hexadecimal encodings of ".." (dot-dot) and allows directory traversal out of the HTTP document root directory.

II. Impact

Remote users can view any file on the server with the privileges of the Jana server process.

III. Solution

Upgrade to Jana Server 2.0 beta or later at:

http://www.jana-server.ocm.de/en/index.htm?/en/download.htm
None.

Systems Affected

Vendor	Status	Date Notified	Date Updated
Jana Server	Vulnerable	26-Feb-2002

References

http://www.securityfocus.com/bid/2703
http://xforce.iss.net/static/6513.php
http://www.cve.mitre.org/cgi-bin/cvename.cgi?name=CAN-2001-0557

Credit

Thanks to nemesystm of the DHC for discovering this vulnerability.

This document was written by Shawn Van Ittersum.

Other Information

Date Public:	2001-05-07
Date First Published:	2002-03-29
Date Last Updated:	2002-03-29
CERT Advisory:
CVE-ID(s):	CAN-2001-0557
NVD-ID(s):	CAN-2001-0557
US-CERT Technical Alerts:
Metric:	2.62
Document Revision:	8

If you have feedback, comments, or additional information about this vulnerability, please send us email.

Get Adobe Reader