CVE-2001-0853 Directory traversal vulnerability in Entrust GetAccess allows remote attackers to read arbitrary files via a .. (dot dot) in the locale parameter to (1) helpwin.gas.bat or (2) AboutBox.gas.bat.
MediumCVSS 5.0
EPSS 3.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Entrust GetAccess allows remote attackers to read arbitrary files via a .. (dot dot) in the locale parameter to (1) helpwin.gas.bat or (2) AboutBox.gas.bat.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| entrust getaccess | = all_versions | No fix listed |
References
- 20011105 Entrust Bulletin E01-005: GetAccess Access Service vulnerability mailing-list patch vendor-advisory
- 20011105 New getAccess[tm] Vulnerability mailing-list
- VU#243243 third-party-advisory us-government-resource
- 3508 vdb-entry
- getaccess-shellscripts-retrieve-files(7474) vdb-entry