CVE-2005-4550 Path traversal in n/a
Remote attackers can read arbitrary JSP and source files via null byte injection in the Discussion Forum Portlet.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2005-4550?
CVE-2005-4550 is a medium-severity path traversal vulnerability in n/a, published on 28 Dec 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The PORTAL schema in Oracle Application Server (OracleAS) Discussion Forum Portlet allows remote attackers to obtain the source code for arbitrary JSP and other files via a df_next_page parameter with a trailing null byte (%00).
Which versions are affected by CVE-2005-4550?
It affects 1 product.
Products include Oracle Application Server Discussion Forum Portlet.
How do I fix CVE-2005-4550?
No fix has been published for CVE-2005-4550 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2005-4550 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2005-4550 exists.
Public exploit code: 1 Exploit-DB entry.
Other vulnerabilities in n/a
Sources
Also known as GHSA-3hh7-4gv3-gf58.