CVE-2004-0204 Path traversal in n/a
Remote attackers can read and delete arbitrary files via directory traversal in Crystal Reports web viewers, affecting multiple Microsoft and Business Objects products.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2004-0204?
CVE-2004-0204 is a high-severity path traversal vulnerability in Bea Weblogic Server, published on 11 Jun 2004. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via ".." sequences in the dynamicimag argument to crystalimagehandler.aspx.
Which versions are affected by CVE-2004-0204?
It affects 9 products.
Products include Bea Weblogic Server, Borland Software J Builder, Businessobjects Crystal Enterprise, Businessobjects Crystal Enterprise Java Sdk, Businessobjects Crystal Enterprise Ras, Businessobjects Crystal Reports and 3 more.
How do I fix CVE-2004-0204?
No fix has been published for CVE-2004-0204 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2004-0204 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2004-0204 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in Bea Weblogic Server
- CVE-2008-3257 Memory corruption in n/a
- CVE-2007-0417 BEA WebLogic Server 7.0 through 7.0 SP7, 8.1 through 8.1 SP5, 9.0, and 9.1, when using the WebLogic Server 6.1 compatibility realm, allows a
- CVE-2003-0640 Privilege escalation in n/a
- CVE-2001-0098 Path traversal in n/a
- CVE-2000-0681 Memory corruption in n/a
Sources
Also known as GHSA-8gfg-jjvj-524x.