CVE-2001-0842 Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernam...
HighCVSS 7.5
EPSS 2.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| leoboard lb5000 | <= 1029 | No fix listed |
References
- 20011030 LB5000 Cookie filter vulnerability mailing-list
- leoboard-cookie-auth-privileges(7436) vdb-entry
- 3484 vdb-entry