CVE-2009-5114

Name of the Vulnerable Software and Affected Versions WebGlimpse versions 2.18.7 and earlier

Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by using a .. (dot dot) in the DOC parameter of the wgarcmin.cgi endpoint.

Recommendations For WebGlimpse versions 2.18.7 and earlier, as a temporary workaround, consider restricting access to the wgarcmin.cgi endpoint until a patch is available. Avoid using the DOC parameter in the wgarcmin.cgi endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.