NVD

Id
62208  
Name
CVE-2006-3534  
Description
Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.6 filters directory traversal sequences before decoding, which allows remote attackers to read arbitrary files via encoded dot dot (%2E%2E) sequences in an HTTP GET request for a file path containing "/content".  
Reject
 
CVSS Version
2  
CVSS Score
7.8  
Severity
High  
CVSS Base Score
7.8  
CVSS Impact Subscore
6.9  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:N/A:N)  
Pub Date
2016-12-20  
Published
2006-07-12  
Modified Date
2011-03-07  
Seq
2006-3534  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
322285 62208 CVE-2006-3534 http://bugs.gentoo.org/show_bug.cgi?id=136721  View
322286 62208 CVE-2006-3534 http://people.ksp.sk/~goober/advisory/001-shoutcast.html  View
322287 62208 CVE-2006-3534 GLSA-200607-05  View
322288 62208 CVE-2006-3534 1016493  View
322289 62208 CVE-2006-3534 http://www.shoutcast.com/#news  View
322290 62208 CVE-2006-3534 ADV-2006-2801  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
60469 JVNDB-2006-002735 Nullsoft SHOUTcast DSP におけるディレクトリトラバーサルの脆弱性 Nullsoft SHOUTcast DSP は、デコード前にディレクトリトラバーサルシーケンスをフィルタするため、ディレクトリトラバーサルの脆弱性が存在します。 CVE-2006-3534 19636 CVE-2006-3534 62208 7.8 http://jvndb.jvn.jp/ja/contents/2006/JVNDB-2006-002735.html 2006-07-12 2012-12-20 View