Orion Application Server Crafted Filename Extension JSP Script Source Disclosure

medium Nessus Plugin ID 21152

Language:

Synopsis

The remote application server suffers from an information disclosure flaw.

Description

The remote host is running Orion Application Server, an application server running on a Java2 platform.

According to its banner, the version of Orion installed on the remote Windows host fails to properly validate filename extensions in URLs. A remote attacker may be able to leverage this issue to disclose the source of JSP scripts hosted by the affected application using specially crafted requests with dot and space characters.

Solution

Upgrade to Orion version 2.0.7 or later.

Plugin Details

Severity: Medium

ID: 21152

File Name: orion_script_source_disclosure.nasl

Version: 1.21

Type: remote

Family: CGI abuses

Published: 3/27/2006

Updated: 1/19/2021

Configuration: Enable paranoid mode

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Low

Score: 2.7

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Information

Required KB Items: Settings/ParanoidReport

Exploit Ease: No exploit is required

Vulnerability Publication Date: 3/23/2006

Reference Information

CVE: CVE-2006-0816

BID: 17204

Detections

Analytics