CVE-2008-1652 Directory traversal vulnerability in the _serve_request_multiple function in lib/Perlbal/ClientHTTPBase.pm in Perlbal before 1.70, when concat get is enabled, allows remote attackers to read arbitrary...
MediumCVSS 5.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in the _serve_request_multiple function in lib/Perlbal/ClientHTTPBase.pm in Perlbal before 1.70, when concat get is enabled, allows remote attackers to read arbitrary files in a parent directory via a directory traversal sequence in an unspecified parameter. NOTE: some of these details are obtained from third party information.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| perlbal | <= 1.60 | No fix listed |
References
- search.cpan.org
- 29565 third-party-advisory vendor-advisory
- ADV-2008-1045 vdb-entry
- perlbal-serverequestmultiple-dir-traversal(41540) vdb-entry
- Debian Security Tracker CVE-2008-1652 vendor-advisory