certfr_avis - certa-2011-avi-442

CERTA-2011-AVI-442

Vulnerability from certfr_avis - Published: - Updated:

Une vulnérabilité permettant à une personne malintentionnée d'obtenir des informations sensibles a été découverte dans les contrôles Chart ASP.NET de Microsoft.

Description

Une vulnérabilité est présente dans la manière dont les contrôles Chart ASP.NET de Microsoft traitent certaines URI contenant des caractères spéciaux. Une exploitation réussie de cette vulnérabilité permet à un attaquant de lire le contenu des fichiers présents dans les répertoires et sous-répertoires du site Web vulnérable.

Solution

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

Seule la version 4 de Microsoft .NET Framework est concernée sur les systèmes suivants:

Windows XP Service Pack 3 ;
Windows XP Professional Édition x64 Service Pack 2 ;
Windows Server 2003 Service Pack 2 ;
Windows Server 2003 Édition x64 Service Pack 2 ;
Windows Server 2003 avec SP2 pour systèmes Itanium ;
Windows Vista Service Pack 2 ;
Windows Vista Édition x64 Service Pack 2 ;
Windows Server 2008 pour systèmes 32 bits Service Pack 2 ;
Windows Server 2008 pour systèmes x64 Service Pack 2 ;
Windows Server 2008 pour systèmes Itanium Service Pack 2 ;
Windows 7 pour systèmes 32 bits ;
Windows 7 pour systèmes 32 bits Service Pack 1 ;
Windows 7 pour systèmes x64 ;
Windows 7 pour systèmes x64 Service Pack 1 ;
Windows Server 2008 R2 pour systèmes x64 ;
Windows Server 2008 R2 pour systèmes x64 Service Pack 1 ;
Windows Server 2008 R2 pour systèmes Itanium ;
Windows Server 2008 R2 pour systèmes Itanium Service Pack 1.

Impacted products

	Vendor	Product	Description

References

Title

Publication Time

Tags

Bulletin de sécurité Microsoft MS-11-066 du 09 août 2011	None	vendor-advisory
Bulletin de sécurité Microsoft MS11-066 du 09 août 2011 :	-	other
Bulletin de sécurité Microsoft MS11-066 du 09 août 2011 :	-	other

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [],
  "affected_systems_content": "\u003cp\u003eSeule la version 4 de \u003cSPAN class=\n  \"textit\"\u003eMicrosoft .NET Framework\u003c/SPAN\u003e est concern\u00e9e sur les  syst\u00e8mes suivants:  \u003cUL\u003e    \u003cLI\u003eWindows XP Service Pack 3 ;\u003c/LI\u003e    \u003cLI\u003eWindows XP Professional \u00c9dition x64 Service Pack 2 ;\u003c/LI\u003e    \u003cLI\u003eWindows Server 2003 Service Pack 2 ;\u003c/LI\u003e    \u003cLI\u003eWindows Server 2003 \u00c9dition x64 Service Pack 2 ;\u003c/LI\u003e    \u003cLI\u003eWindows Server 2003 avec SP2 pour syst\u00e8mes Itanium ;\u003c/LI\u003e    \u003cLI\u003eWindows Vista Service Pack 2 ;\u003c/LI\u003e    \u003cLI\u003eWindows Vista \u00c9dition x64 Service Pack 2 ;\u003c/LI\u003e    \u003cLI\u003eWindows Server 2008 pour syst\u00e8mes 32 bits Service Pack 2    ;\u003c/LI\u003e    \u003cLI\u003eWindows Server 2008 pour syst\u00e8mes x64 Service Pack 2 ;\u003c/LI\u003e    \u003cLI\u003eWindows Server 2008 pour syst\u00e8mes Itanium Service Pack 2    ;\u003c/LI\u003e    \u003cLI\u003eWindows 7 pour syst\u00e8mes 32 bits ;\u003c/LI\u003e    \u003cLI\u003eWindows 7 pour syst\u00e8mes 32 bits Service Pack 1 ;\u003c/LI\u003e    \u003cLI\u003eWindows 7 pour syst\u00e8mes x64 ;\u003c/LI\u003e    \u003cLI\u003eWindows 7 pour syst\u00e8mes x64 Service Pack 1 ;\u003c/LI\u003e    \u003cLI\u003eWindows Server 2008 R2 pour syst\u00e8mes x64 ;\u003c/LI\u003e    \u003cLI\u003eWindows Server 2008 R2 pour syst\u00e8mes x64 Service Pack 1    ;\u003c/LI\u003e    \u003cLI\u003eWindows Server 2008 R2 pour syst\u00e8mes Itanium ;\u003c/LI\u003e    \u003cLI\u003eWindows Server 2008 R2 pour syst\u00e8mes Itanium Service Pack    1.\u003c/LI\u003e  \u003c/UL\u003e\u003c/p\u003e",
  "content": "## Description\n\nUne vuln\u00e9rabilit\u00e9 est pr\u00e9sente dans la mani\u00e8re dont les contr\u00f4les Chart\nASP.NET de Microsoft traitent certaines URI contenant des caract\u00e8res\nsp\u00e9ciaux. Une exploitation r\u00e9ussie de cette vuln\u00e9rabilit\u00e9 permet \u00e0 un\nattaquant de lire le contenu des fichiers pr\u00e9sents dans les r\u00e9pertoires\net sous-r\u00e9pertoires du site Web vuln\u00e9rable.\n\n## Solution\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des\ncorrectifs (cf. section Documentation).\n",
  "cves": [
    {
      "name": "CVE-2011-1977",
      "url": "https://www.cve.org/CVERecord?id=CVE-2011-1977"
    }
  ],
  "links": [
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS11-066 du 09 ao\u00fbt 2011 :",
      "url": "http://www.microsoft.com/france/technet/security/Bulletin/MS11-066.mspx"
    },
    {
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS11-066 du 09 ao\u00fbt 2011 :",
      "url": "http://www.microsoft.com/technet/security/Bulletin/MS11-066.mspx"
    }
  ],
  "reference": "CERTA-2011-AVI-442",
  "revisions": [
    {
      "description": "version initiale.",
      "revision_date": "2011-08-10T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Atteinte \u00e0 la confidentialit\u00e9 des donn\u00e9es"
    }
  ],
  "summary": "Une vuln\u00e9rabilit\u00e9 permettant \u00e0 une personne malintentionn\u00e9e d\u0027obtenir\ndes informations sensibles a \u00e9t\u00e9 d\u00e9couverte dans les contr\u00f4les Chart\n\u003cspan class=\"textit\"\u003eASP.NET\u003c/span\u003e de \u003cspan\nclass=\"textit\"\u003eMicrosoft\u003c/span\u003e.\n",
  "title": "Vuln\u00e9rabilit\u00e9 dans les contr\u00f4les Chart ASP.NET de Microsoft",
  "vendor_advisories": [
    {
      "published_at": null,
      "title": "Bulletin de s\u00e9curit\u00e9 Microsoft MS-11-066 du 09 ao\u00fbt 2011",
      "url": null
    }
  ]
}

CVE-2011-1977 (GCVE-0-2011-1977)

Vulnerability from cvelistv5 – Published: 2011-08-10 21:16 – Updated: 2024-08-06 22:46

Summary

The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify functions in URIs, which allows remote attackers to read arbitrary files via special characters in a URI in an HTTP request, aka "Chart Control Information Disclosure Vulnerability."

Severity ?

No CVSS data available.

CWE

Assigner

microsoft

References

URL

Tags

	https://oval.cisecurity.org/repository/search/def…	vdb-entrysignaturex_refsource_OVAL
	https://docs.microsoft.com/en-us/security-updates…	vendor-advisoryx_refsource_MS
	http://www.us-cert.gov/cas/techalerts/TA11-221A.html	third-party-advisoryx_refsource_CERT

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T22:46:00.816Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "name": "oval:org.mitre.oval:def:12970",
            "tags": [
              "vdb-entry",
              "signature",
              "x_refsource_OVAL",
              "x_transferred"
            ],
            "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12970"
          },
          {
            "name": "MS11-066",
            "tags": [
              "vendor-advisory",
              "x_refsource_MS",
              "x_transferred"
            ],
            "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-066"
          },
          {
            "name": "TA11-221A",
            "tags": [
              "third-party-advisory",
              "x_refsource_CERT",
              "x_transferred"
            ],
            "url": "http://www.us-cert.gov/cas/techalerts/TA11-221A.html"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "datePublic": "2011-08-09T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify functions in URIs, which allows remote attackers to read arbitrary files via special characters in a URI in an HTTP request, aka \"Chart Control Information Disclosure Vulnerability.\""
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2018-10-12T19:57:01",
        "orgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
        "shortName": "microsoft"
      },
      "references": [
        {
          "name": "oval:org.mitre.oval:def:12970",
          "tags": [
            "vdb-entry",
            "signature",
            "x_refsource_OVAL"
          ],
          "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12970"
        },
        {
          "name": "MS11-066",
          "tags": [
            "vendor-advisory",
            "x_refsource_MS"
          ],
          "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-066"
        },
        {
          "name": "TA11-221A",
          "tags": [
            "third-party-advisory",
            "x_refsource_CERT"
          ],
          "url": "http://www.us-cert.gov/cas/techalerts/TA11-221A.html"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "secure@microsoft.com",
          "ID": "CVE-2011-1977",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The ASP.NET Chart controls in Microsoft .NET Framework 4, and Chart Control for Microsoft .NET Framework 3.5 SP1, do not properly verify functions in URIs, which allows remote attackers to read arbitrary files via special characters in a URI in an HTTP request, aka \"Chart Control Information Disclosure Vulnerability.\""
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "oval:org.mitre.oval:def:12970",
              "refsource": "OVAL",
              "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A12970"
            },
            {
              "name": "MS11-066",
              "refsource": "MS",
              "url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/2011/ms11-066"
            },
            {
              "name": "TA11-221A",
              "refsource": "CERT",
              "url": "http://www.us-cert.gov/cas/techalerts/TA11-221A.html"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "f38d906d-7342-40ea-92c1-6c4a2c6478c8",
    "assignerShortName": "microsoft",
    "cveId": "CVE-2011-1977",
    "datePublished": "2011-08-10T21:16:00",
    "dateReserved": "2011-05-09T00:00:00",
    "dateUpdated": "2024-08-06T22:46:00.816Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or observed by the user.
Confirmed: The vulnerability has been validated from an analyst's perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
Not confirmed: The user expressed doubt about the validity of the vulnerability.
Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.

Detection rules are retrieved from Rulezet.

Action not permitted

CERTA-2011-AVI-442

Description

Solution

CVE-2011-1977 (GCVE-0-2011-1977)

Tags

Sightings

Nomenclature