Blue Coat Reporter Directory Traversal Vulnerability


Description   Alejandro Hernandez has reported a vulnerability in Blue Coat Reporter, which can be exploited by malicious people to disclose sensitive information.
For more information:
SA45898
The vulnerability is reported in versions prior to 9.3 running on Windows.
     
Vulnerable Products   Vulnerable Software:
Blue Coat Reporter 9.x
     
Solution   Update to version 9.3.1.1.
     
CVE  
     
References   Blue Coat:
https://kb.bluecoat.com/index?page=content&
id=SA60
nitr0us:
http://www.exploit-db.com/exploits/17883/
     
Vulnerability Manager Detection   No
     
IPS Protection  
ASQ Engine alarm Available Since
Misc : Directory traversal - parameter starting with ../
3.2.0
Directory traversal using ..\..
3.2.0
Directory traversal
3.2.0
Directory traversal backward root folder
3.2.0
Misc : Local File Inclusion - suspicious /etc/passwd found in URL
3.5.0
     


 
 
 
 
 Risk level 
Low 

 Vulnerability First Public Report Date 
2011-09-07 

 Target Type 
Server 

 Possible exploit 
Local