CVE

Id
3659  
CVE No.
CVE-2001-0853  
Status
Candidate  
Description
Directory traversal vulnerability in Entrust GetAccess allows remote attackers to read arbitrary files via a .. (dot dot) in the locale parameter to (1) helpwin.gas.bat or (2) AboutBox.gas.bat.  
Phase
Modified (20050526)  
Votes
ACCEPT(4) Armstrong, Baker, Bishop, Cole | MODIFY(1) Frech | NOOP(2) Foat, Wall  
Comments
Frech> XF:getaccess-shellscripts-retrieve-files(7474)  

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
16283 3659 CVE-2001-0853 BUGTRAQ:20011105 New getAccess[tm] Vulnerability  View
16284 3659 CVE-2001-0853 URL:http://marc.info/?l=bugtraq&m=100498111712723&w=2  View
16285 3659 CVE-2001-0853 BUGTRAQ:20011105 Entrust Bulletin E01-005: GetAccess Access Service vulnerability  View
16286 3659 CVE-2001-0853 URL:http://archives.neohapsis.com/archives/bugtraq/2001-11/0022.html  View
16287 3659 CVE-2001-0853 CERT-VN:VU#243243  View
16288 3659 CVE-2001-0853 URL:http://www.kb.cert.org/vuls/id/243243  View
16289 3659 CVE-2001-0853 BID:3508  View
16290 3659 CVE-2001-0853 URL:http://www.securityfocus.com/bid/3508  View
16291 3659 CVE-2001-0853 XF:getaccess-shellscripts-retrieve-files(7474)  View

Related JVN