MEDIUM
Directory traversal vulnerability in Redirect.bat in IBM Director before 5.10 allows remote attackers to read arbitrary files via a .
Published Sep 11, 2006
5.0
MEDIUMCVSS 2.0
EPSS 3.59%
Description
Directory traversal vulnerability in Redirect.bat in IBM Director before 5.10 allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the file parameter.
Affected products
Remediation
No remediation recorded yet.
Weaknesses (0)
No CWE recorded.
References (8)
- ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers_pdf/dir5.10_docs_relnotes.pdf vendor-advisoryx_refsource_AIXAPARPatch
- http://secunia.com/advisories/21802 third-party-advisoryx_refsource_SECUNIAExploitPatchVendor Advisory
- http://securitytracker.com/id?1016815 vdb-entryx_refsource_SECTRACKExploitPatch
- http://www.securityfocus.com/bid/19898 vdb-entryx_refsource_BIDExploitPatch
- http://www.vupen.com/english/advisories/2006/3532 vdb-entryx_refsource_VUPEN
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-4669 Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28836 vdb-entryx_refsource_XF
- https://www.exploit-db.com/exploits/2320 exploitx_refsource_EXPLOIT-DB
| Link | Providers | Tags |
|---|---|---|
| ftp://ftp.software.ibm.com/pc/pccbbs/pc_servers_pdf/dir5.10_docs_relnotes.pdf | vendor-advisoryx_refsource_AIXAPARPatch | |
| http://secunia.com/advisories/21802 | third-party-advisoryx_refsource_SECUNIAExploitPatchVendor Advisory | |
| http://securitytracker.com/id?1016815 | vdb-entryx_refsource_SECTRACKExploitPatch | |
| http://www.securityfocus.com/bid/19898 | vdb-entryx_refsource_BIDExploitPatch | |
| http://www.vupen.com/english/advisories/2006/3532 | vdb-entryx_refsource_VUPEN | |
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2006-4669 | Advisory | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/28836 | vdb-entryx_refsource_XF | |
| https://www.exploit-db.com/exploits/2320 | exploitx_refsource_EXPLOIT-DB |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Sep 11, 2006
Updated Aug 7, 2024
Reserved Sep 11, 2006
Link CVE-2006-4681
CISA Vulnrichment
Updated n/a
ENISA EUVD
EUVD-2006-4669 Assigner mitre
Published Sep 11, 2006
Updated Aug 7, 2024
Exploited since n/a
Link EUVD-2006-4669