Uploaded image for project: 'JDK'
  1. JDK
  2. JDK-8290997

Null byte injection string in java java logging

    XMLWordPrintable

Details

    Description

      ADDITIONAL SYSTEM INFORMATION :
      tested by Linux, java --version 11.0.15

      A DESCRIPTION OF THE PROBLEM :
      The null byte is splitting the function argument string. this problem is occurring in this function and perhaps in other functions of this package

      STEPS TO FOLLOW TO REPRODUCE THE PROBLEM :
      \0 null byte indicates a end String in argument
      call static methods from Object Logger
      Logger.getAnonymousLogger().log(Level.INFO,"12\03");
      Pass arguments Level and String payload

      EXPECTED VERSUS ACTUAL BEHAVIOR :
      EXPECTED -
      Logger.getAnonymousLogger().log(Level.INFO,"12\03");
      outuput:

      jul 25, 2022 7:06:21 PM teste main
      INFORMATIONS: 12
      //where's the 3?

      ACTUAL -
      no error msgs

      ---------- BEGIN SOURCE ----------
      Logger.getAnonymousLogger().log(Level.INFO,"12\03");
      ---------- END SOURCE ----------

      CUSTOMER SUBMITTED WORKAROUND :
      clear string arguments of any bytes entered by '\'

      FREQUENCY : occasionally


      Attachments

        Activity

          People

            michaelm Michael McMahon
            webbuggrp Webbug Group
            Votes:
            0 Vote for this issue
            Watchers:
            3 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: