CVE-2006-2102 Directory traversal vulnerability in PowerISO 2.9 allows remote attackers to write arbitrary files via a .. (dot dot) in a filename in an ISO image.
HighCVSS 7.8
EPSS 3.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in PowerISO 2.9 allows remote attackers to write arbitrary files via a .. (dot dot) in a filename in an ISO image.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| poweriso | = 2.9 | No fix listed |
References
- 19858 exploit third-party-advisory vendor-advisory
- 815 third-party-advisory
- 1016008 vdb-entry
- secway.org exploit vendor-advisory
- 20060428 WinISO/UltraISO/MagicISO/PowerISO Directory Traversal Vulnerability mailing-list
- 17726 vdb-entry
- ADV-2006-1570 vdb-entry
- iso-dotdot-directory-traversal(26140) vdb-entry