CVE-2006-5050 Directory traversal vulnerability in httpd in Rob Landley BusyBox allows remote attackers to read arbitrary files via URL-encoded "%2e%2e/" sequences in the URI.
MediumCVSS 5.0
EPSS 1.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in httpd in Rob Landley BusyBox allows remote attackers to read arbitrary files via URL-encoded "%2e%2e/" sequences in the URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| rob landley busybox | = 1.01 | No fix listed |
References
- 1636 third-party-advisory
- 1016875 exploit vdb-entry
- 20060916 Busy box httpd file traversal vulenrability mailing-list
- 20067 vdb-entry
- Debian Security Tracker CVE-2006-5050 vendor-advisory