CVE-2001-0805

Name of the Vulnerable Software and Affected Versions Tarantella Enterprise versions 3.00 through 3.01

Description A directory traversal issue exists, allowing remote attackers to read arbitrary files. This is achieved by including a .. (dot dot) in the pg parameter of the ttawebtop.cgi endpoint.

Recommendations For versions 3.00 and 3.01, restrict access to the ttawebtop.cgi endpoint to minimize the risk of exploitation. Avoid using the pg parameter in the ttawebtop.cgi endpoint until the issue is resolved.