CVE-2007-5685 The safe_path function in shttp before 0.0.5 allows remote attackers to conduct directory traversal attacks and read files via a combination of ".." and sub-directory specifiers that resolve to a path...
MediumCVSS 5.0
EPSS 3.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
The safe_path function in shttp before 0.0.5 allows remote attackers to conduct directory traversal attacks and read files via a combination of ".." and sub-directory specifiers that resolve to a pathname that is at or below the same level as the web document root, but in a different part of the directory tree.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| serverkit shttp | <= 0.0.4 | No fix listed |
References
- 43607 vdb-entry
- serverkit.org patch
- www.digineo.co.uk patch
- 20071025 Directory traversal flaw in shttp mailing-list
- 26212 exploit vdb-entry
- shttp-safepath-directory-traversal(37455) vdb-entry