CVE

Id
20244  
CVE No.
CVE-2006-4140  
Status
Candidate  
Description
Directory traversal vulnerability in IPCheck Server Monitor before 5.3.3.639/640 allows remote attackers to read arbitrary files via modified .. (dot dot) sequences in the URL, including (1) "..%2f" (encoded "/" slash), "..../" (multiple dot), and "..%255c../" (double-encoded "" backslash).  
Phase
Assigned (20060814)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
187781 20244 CVE-2006-4140 BUGTRAQ:20060810 Directory Traversal vulnerability in IPCheck Monitor Server  View
187782 20244 CVE-2006-4140 URL:http://www.securityfocus.com/archive/1/archive/1/442822/100/0/threaded  View
187783 20244 CVE-2006-4140 BUGTRAQ:20060824 Re: Directory Traversal vulnerability in IPCheck Monitor Server  View
187784 20244 CVE-2006-4140 URL:http://www.securityfocus.com/archive/1/archive/1/444227/100/0/threaded  View
187785 20244 CVE-2006-4140 CONFIRM:http://www.paessler.com/forum/viewtopic.php?p=4047&sid=f8c0f03a69d9498338797c6ea3cc6733  View
187786 20244 CVE-2006-4140 CONFIRM:http://www.paessler.com/ipcheck/history  View
187787 20244 CVE-2006-4140 BID:19473  View
187788 20244 CVE-2006-4140 URL:http://www.securityfocus.com/bid/19473  View
187789 20244 CVE-2006-4140 VUPEN:ADV-2006-3259  View
187790 20244 CVE-2006-4140 URL:http://www.vupen.com/english/advisories/2006/3259  View
187791 20244 CVE-2006-4140 SECTRACK:1016676  View
187792 20244 CVE-2006-4140 URL:http://securitytracker.com/id?1016676  View
187793 20244 CVE-2006-4140 SECUNIA:21468  View
187794 20244 CVE-2006-4140 URL:http://secunia.com/advisories/21468  View
187795 20244 CVE-2006-4140 SREASON:1389  View
187796 20244 CVE-2006-4140 URL:http://securityreason.com/securityalert/1389  View
187797 20244 CVE-2006-4140 XF:ipcheck-url-directory-traversal(28341)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
60758 JVNDB-2006-003024 VWar の extra/online.php における SQL インジェクションの脆弱性 Virtual War (VWar) の extra/online.php には、SQL インジェクションの脆弱性が存在します。 CVE-2006-4142 20244 7.5 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-003024.html  View