CVE-2005-0344 Directory traversal vulnerability in 602LAN SUITE 2004.0.04.1221 allows remote authenticated users to upload and execute arbitrary files via a .. (dot dot) in the filename parameter.
MediumCVSS 5.0
EPSS 2.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in 602LAN SUITE 2004.0.04.1221 allows remote authenticated users to upload and execute arbitrary files via a .. (dot dot) in the filename parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| software602 602lan suite | = 2004.0.04.1221 | No fix listed |
References
- 20050208 [SIG^2 G-TEC] 602LAN SUITE Web Mail Vulnerability Allows File Upload to Arbitrary Directories mailing-list
- 14169 patch third-party-advisory vendor-advisory
- 1013106 vdb-entry
- www.security.org.sg exploit patch vendor-advisory
- 602lansuite-webmail-directory-traversal(19258) vdb-entry