CVE

Id
52970  
CVE No.
CVE-2011-5058  
Status
Candidate  
Description
The CmbWebserver.dll module of the Control service in 3S CoDeSys 3.4 SP4 Patch 2 allows remote attackers to create arbitrary directories under the web root by specifying a non-existent directory using (backslash) characters in an HTTP GET request.  
Phase
Assigned (20120110)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
561285 52970 CVE-2011-5058 MISC:http://aluigi.altervista.org/adv/codesys_1-adv.txt  View
561286 52970 CVE-2011-5058 MISC:http://www.us-cert.gov/control_systems/pdf/ICS-ALERT-11-336-01A.pdf  View
561287 52970 CVE-2011-5058 SECUNIA:47018  View
561288 52970 CVE-2011-5058 URL:http://secunia.com/advisories/47018  View
561289 52970 CVE-2011-5058 XF:codesys-cmbwebserver-dir-traversal(72339)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
25356 JVNDB-2012-001063 Apache Tomcat の HTTP Digest Access Authentication 実装におけるアクセス制限を回避される脆弱性 Apache Tomcat の HTTP Digest Access Authentication 実装は、realm 値をチェックしないため、アクセス制限を回避される脆弱性が存在します。 CVE-2011-5063 52970 4.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-001063.html  View