CVE-2004-2565 Multiple directory traversal vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, when the administrative IP address restrictions have been modified from the d...
MediumCVSS 5.0
EPSS 9.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple directory traversal vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, when the administrative IP address restrictions have been modified from the default, allow remote authenticated users to read arbitrary files via (1) a ".." (dot dot backslash) in the file parameter to showini.asp, or (2) an absolute path with drive letter in the log parameter to showlog.asp.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| sambar server | = 6.1-beta2 | No fix listed |
References
- 11748 exploit third-party-advisory vendor-advisory
- 1010353 exploit vdb-entry
- www.oliverkarow.de exploit
- 6585 exploit vdb-entry
- 10444 exploit vdb-entry
- sambar-multiple-directory-traversal(16287) vdb-entry