CVE

Id
30455  
CVE No.
CVE-2008-0338  
Status
Candidate  
Description
Directory traversal vulnerability in the mwGetLocalFileName function in http.c in MiniWeb HTTP Server 0.8.19 allows remote attackers to read arbitrary files and list arbitrary directories via a (1) .%2e (partially encoded dot dot) or (2) %2e%2e (encoded dot dot) in the URI.  
Phase
Assigned (20080117)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
323178 30455 CVE-2008-0338 MILW0RM:4923  View
323179 30455 CVE-2008-0338 URL:http://www.milw0rm.com/exploits/4923  View
323180 30455 CVE-2008-0338 MISC:http://www.bugtraq.ir/adv/miniweb_english.pdf  View
323181 30455 CVE-2008-0338 BID:27319  View
323182 30455 CVE-2008-0338 URL:http://www.securityfocus.com/bid/27319  View
323183 30455 CVE-2008-0338 VUPEN:ADV-2008-0176  View
323184 30455 CVE-2008-0338 URL:http://www.vupen.com/english/advisories/2008/0176  View
323185 30455 CVE-2008-0338 SECUNIA:28512  View
323186 30455 CVE-2008-0338 URL:http://secunia.com/advisories/28512  View
323187 30455 CVE-2008-0338 XF:miniweb-mwgetlocal-directory-traversal(39713)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
45712 JVNDB-2008-001022 Oracle Database の Upgrade/Downgrade コンポーネントにおける脆弱性 Oracle Database の Upgrade/Downgrade コンポーネントに関連する脆弱性が存在します。(DB05) CVE-2008-0342 30455 10 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-001022.html  View