CVE-2004-2184 Directory traversal vulnerability in Digicraft Yak! server 2.0 through 2.1.2 allows remote attackers to read or write arbitrary files via "../" or ".." sequences in commands such as (1) dir or (2) put...
MediumCVSS 6.4
EPSS 8.1%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Directory traversal vulnerability in Digicraft Yak! server 2.0 through 2.1.2 allows remote attackers to read or write arbitrary files via "../" or ".." sequences in commands such as (1) dir or (2) put.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| digicraft software yak | = 2.0 | No fix listed |
| digicraft software yak | = 2.0.1 | No fix listed |
| digicraft software yak | = 2.0.2 | No fix listed |
| digicraft software yak | = 2.1.0 | No fix listed |
| digicraft software yak | = 2.1.1 | No fix listed |
| digicraft software yak | = 2.1.2 | No fix listed |
References
- aluigi.altervista.org exploit
- 20041015 Directory traversal in Yak! 2.1.2 mailing-list
- 12849 third-party-advisory
- 1011708 vdb-entry
- 10763 vdb-entry
- 20041015 Directory traversal in Yak! 2.1.2 exploit mailing-list
- 11433 exploit vdb-entry
- yak-directory-traversal(17740) vdb-entry