CVE

Id
42502  
CVE No.
CVE-2009-5067  
Status
Candidate  
Description
Directory traversal vulnerability in html2ps before 1.0b6 allows remote attackers to read arbitrary files via a .. (dot dot) in the "include file" SSI directive. NOTE: this issue only might be a vulnerability in limited scenarios, such as if html2ps is invoked by a web application, or if a user-assisted attacker provides filenames whose contents could cause a denial of service, such as certain devices.  
Phase
Assigned (20110405)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
463077 42502 CVE-2009-5067 MLIST:[oss-security] 20121005 CVE Request: html2ps  View
463078 42502 CVE-2009-5067 URL:http://www.openwall.com/lists/oss-security/2012/10/05/1  View
463079 42502 CVE-2009-5067 MLIST:[oss-security] 20121005 Re: CVE Request: html2ps  View
463080 42502 CVE-2009-5067 URL:http://www.openwall.com/lists/oss-security/2012/10/05/5  View
463081 42502 CVE-2009-5067 MISC:http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=548633  View
463082 42502 CVE-2009-5067 MISC:http://packetstormsecurity.org/files/81614/html2ps-1.0-beta5-File-Disclosure.html  View
463083 42502 CVE-2009-5067 MISC:https://bugzilla.redhat.com/show_bug.cgi?id=526513  View
463084 42502 CVE-2009-5067 CONFIRM:http://user.it.uu.se/~jan/html2ps-1.0b7.tar.gz  View
463085 42502 CVE-2009-5067 MANDRIVA:MDVSA-2012:161  View
463086 42502 CVE-2009-5067 URL:http://www.mandriva.com/security/advisories?name=MDVSA-2012:161  View
463087 42502 CVE-2009-5067 BID:36524  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
33575 JVNDB-2011-003817 Palm Pre WebOS における詳細不明な脆弱性 Palm Pre WebOS には、詳細不明な脆弱性が存在します。 CVE-2009-5071 42502 10 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-003817.html  View