CVE-2004-0465 Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to read keys within arbitrary INI formatted files via "..//" seque...
MediumCVSS 5.0
EPSS 12.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in jretest.html in WebConnect 6.5 and 6.4.4, and possibly earlier versions, allows remote attackers to read keys within arbitrary INI formatted files via "..//" sequences in the WCP_USER parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| openconnect webconnect | = 6.4.4 | No fix listed |
| openconnect webconnect | = 6.5 | No fix listed |
References
- 20050220 The WebConnect 6.4.4 and 6.5 contains several vulnerabilities mailing-list
- 14006 patch third-party-advisory
- www.cirt.dk exploit patch vendor-advisory
- VU#628411 third-party-advisory us-government-resource
- www.kb.cert.org third-party-advisory us-government-resource
- webconnect-wcpuser-directory-traversal(19394) vdb-entry