CVE

Id
10991  
CVE No.
CVE-2004-2565  
Status
Candidate  
Description
Multiple directory traversal vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, when the administrative IP address restrictions have been modified from the default, allow remote authenticated users to read arbitrary files via (1) a ".." (dot dot backslash) in the file parameter to showini.asp, or (2) an absolute path with drive letter in the log parameter to showlog.asp.  
Phase
Assigned (20051122)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
77143 10991 CVE-2004-2565 MISC:http://www.oliverkarow.de/research/sambar.txt  View
77144 10991 CVE-2004-2565 BID:10444  View
77145 10991 CVE-2004-2565 URL:http://www.securityfocus.com/bid/10444  View
77146 10991 CVE-2004-2565 OSVDB:6585  View
77147 10991 CVE-2004-2565 URL:http://www.osvdb.org/6585  View
77148 10991 CVE-2004-2565 SECTRACK:1010353  View
77149 10991 CVE-2004-2565 URL:http://securitytracker.com/id?1010353  View
77150 10991 CVE-2004-2565 SECUNIA:11748  View
77151 10991 CVE-2004-2565 URL:http://secunia.com/advisories/11748  View
77152 10991 CVE-2004-2565 XF:sambar-multiple-directory-traversal(16287)  View

Related JVN