NVD

Id
11527  
Name
CVE-2011-5273  
Description
Directory traversal vulnerability in shared/package-installer in Domain Technologie Control (DTC) before 0.34.1 allows remote authenticated users to execute arbitrary PHP code via a .. (dot dot) in the pkg parameter in a do_install action to dtc/.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-07  
Published
2014-03-21  
Modified Date
2014-03-21  
Seq
2011-5273  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
63168 11527 CVE-2011-5273 http://git.gplhost.com/gitweb/?p=dtc.git;a=blob;f=debian/changelog;hb=3eb6ef5cea6c571aae5e49e1930de778eca280c3  View
63169 11527 CVE-2011-5273 DSA-2365  View
63170 11527 CVE-2011-5273 https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=637629  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
35062 JVNDB-2011-005304 Domain Technologie Control の shared/package-installer におけるディレクトリトラバーサルの脆弱性 Domain Technologie Control (DTC) の shared/package-installer には、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2011-5273 53180 CVE-2011-5273 11527 6.5 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-005304.html 2011-08-12 2014-03-25 View