CVE-2009-2166 - Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter

Back Back to CVE browser

MEDIUM

Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter

Published Jun 22, 2009

5.0

MEDIUM

CVSS 2.0

EPSS 3.19%

Description

Absolute path traversal vulnerability in cvs.php in OCS Inventory NG before 1.02.1 on Unix allows remote attackers to read arbitrary files via a full pathname in the log parameter.

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-22

Path Traversal

References (4)

http://www.leidecker.info/advisories/2009-05-30-ocs_inventory_ng_directory_traversal.shtml
x_refsource_MISCExploit
http://www.securityfocus.com/archive/1/504047/100/0/threaded
mailing-listx_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilities/50946
vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/8868
exploitx_refsource_EXPLOIT-DB

Link	Providers	Tags
http://www.leidecker.info/advisories/2009-05-30-ocs_inventory_ng_directory_traversal.shtml		x_refsource_MISCExploit
http://www.securityfocus.com/archive/1/504047/100/0/threaded		mailing-listx_refsource_BUGTRAQ
https://exchange.xforce.ibmcloud.com/vulnerabilities/50946		vdb-entryx_refsource_XF
https://www.exploit-db.com/exploits/8868		exploitx_refsource_EXPLOIT-DB

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 22, 2009

Updated Aug 7, 2024

Reserved Jun 22, 2009

Link CVE-2009-2166

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2009-2166

Red Hat

Severity n/a

Public date n/a

Links CVE-2009-2166

Description

Affected products

Remediation

References (4)

Change history (0)