CVE-2005-2731 - Directory traversal vulnerability in Astaro Security Linux 6.0, when using Webmin, allows remote aut

CVE-2005-2731

Summary

Directory traversal vulnerability in Astaro Security Linux 6.0, when using Webmin, allows remote authenticated webmin users to read arbitrary files via a .. (dot dot) in the wfe_download parameter to index.fpl.

References

http://marc.info/?l=bugtraq&m=112501186602731&w=2

Vulnerable Configurations

cpe:2.3:o:astaro:security_linux:6.001:*:*:*:*:*:*:*
cpe:2.3:o:astaro:security_linux:6.001:*:*:*:*:*:*:*

CVSS

Base:	2.1 (as of 18-10-2016 - 03:29)
Impact:
Exploitability:

CWE

NVD-CWE-Other

CAPEC

Access

Vector	Complexity	Authentication
LOCAL	LOW	NONE

Impact

Confidentiality	Integrity	Availability
PARTIAL	NONE	NONE

cvss-vector via4

AV:L/AC:L/Au:N/C:P/I:N/A:N

refmap via4

bugtraq

20050825 Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness

Last major update

18-10-2016 - 03:29

Published

30-08-2005 - 11:45

Last modified

18-10-2016 - 03:29