CVE-2001-0842 - Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows

CVE-2001-0842

Summary

Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.

References

http://marc.info/?l=bugtraq&m=100446455809273&w=2
http://www.iss.net/security_center/static/7436.php
http://www.securityfocus.com/bid/3484

Vulnerable Configurations

cpe:2.3:a:leoboard:lb5000:*:*:*:*:*:*:*:*
cpe:2.3:a:leoboard:lb5000:*:*:*:*:*:*:*:*

CVSS

Base:	7.5 (as of 18-10-2016 - 02:12)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
NETWORK	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	PARTIAL	PARTIAL

cvss-vector via4

AV:N/AC:L/Au:N/C:P/I:P/A:P

refmap via4

bid	3484
bugtraq	20011030 LB5000 Cookie filter vulnerability
xf	leoboard-cookie-auth-privileges(7436)

Last major update

18-10-2016 - 02:12

Published

06-12-2001 - 05:00

Last modified

18-10-2016 - 02:12