CVE-2005-1939 Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." (dot dot) sequences in a request to the Report service (TCP 8022).
MediumCVSS 5.0
EPSS 63.6%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." (dot dot) sequences in a request to the Report service (TCP 8022).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ipswitch whatsup small business | = 2004 | No fix listed |
References
- cirt.dk exploit vendor-advisory
- 15500 exploit third-party-advisory vendor-advisory
- secunia.com exploit vendor-advisory
- 1015141 exploit vdb-entry
- 15291 exploit vdb-entry
- whatsup-smallbusiness-dotdot-traversal(22969) vdb-entry