CVE-2007-0883 Directory traversal vulnerability in portalgroups/portalgroups/getfile.cgi in IP3 NetAccess before firmware 4.1.9.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the filename p...
MediumCVSS 5.0
EPSS 4.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in portalgroups/portalgroups/getfile.cgi in IP3 NetAccess before firmware 4.1.9.6 allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| second rule llc ip3 netaccess | <= 4.1.9.5 | No fix listed |
References
- 20070211 Arbitrary file disclosure vulnerability in IP3 NetAccess < 4.1.9.6 mailing-list
- 31912 vdb-entry
- 24118 third-party-advisory
- www.devtarget.org exploit patch vendor-advisory
- 20070211 Arbitrary file disclosure vulnerability in IP3 NetAccess < 4.1.9.6 mailing-list
- 22513 vdb-entry
- 1017623 vdb-entry
- ADV-2007-0615 vdb-entry
- ip3netaccess-getfile-directory-traversal(32432) vdb-entry
- 3294 exploit