PT-2005-1413 · Emotion · Emotion Mediapartner Web Server

Paul J Docherty

·

CVE-2005-0335

·

Publicado

2005-02-10

·

Atualizado

2017-07-11

CVSS v2.0

5.0

Média

VetorAV:N/AC:L/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions EMotion MediaPartner Web Server version 5.0
Description A directory traversal issue allows remote attackers to read arbitrary files by including a .. (dot dot) in the URL.
Recommendations For EMotion MediaPartner Web Server version 5.0, consider restricting access to sensitive files and directories as a temporary workaround until a patch is available.

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2005-0335

Produtos afetados

Emotion Mediapartner Web Server