CVE-2008-4243 Directory traversal vulnerability in ImageServer (aka UTImageServer) in WebAdmin before 1.7 for Epic Games Unreal Tournament 3 (UT3) 1.3 allows remote attackers to read arbitrary files via a .. (dot d...
HighCVSS 7.8
EPSS 3.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in ImageServer (aka UTImageServer) in WebAdmin before 1.7 for Epic Games Unreal Tournament 3 (UT3) 1.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the URI.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| epic games unreal tournament 3 | = 1.3-build_3601 | No fix listed |
| epic games unreal tournament 3 | = 1.3-build_3614 | No fix listed |
References
- aluigi.org exploit
- 31926 third-party-advisory
- 4317 third-party-advisory
- ut3webadmin.elmuerte.com patch
- 31272 exploit patch vdb-entry
- ADV-2008-2635 vdb-entry
- ut3webadmin-imageserver-dir-traversal(45292) vdb-entry
- 6506 exploit