CVE-2005-3484 Directory traversal vulnerability in NeroNET 1.2.0.2 and earlier allows remote attackers to read arbitrary files with certain file extensions (such as ZIP, AVI, JPG, TXT, and HTML) via ".." and hex-en...
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in NeroNET 1.2.0.2 and earlier allows remote attackers to read arbitrary files with certain file extensions (such as ZIP, AVI, JPG, TXT, and HTML) via ".." and hex-encoded (1) slash "/" ("%2f") or (2) backslash "" ("%5c") sequences.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| neronet | <= 1.2.0.2 | No fix listed |
References
- aluigi.altervista.org exploit vendor-advisory
- 20051102 Limited directory traversal in NeroNET 1.2.0.2 mailing-list
- 17421 third-party-advisory
- 15288 vdb-entry
- ADV-2005-2287 vdb-entry