CVE-2010-4181 Directory traversal vulnerability in Yaws 1.89 allows remote attackers to read arbitrary files via ..\ (dot dot backslash) and other sequences.
MediumCVSS 5.0
EPSS 8.5%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in Yaws 1.89 allows remote attackers to read arbitrary files via ..\ (dot dot backslash) and other sequences.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| yaws | = 1.89 | No fix listed |
References
- 68962 vdb-entry
- 42066 third-party-advisory vendor-advisory
- 15371 exploit
- 44564 vdb-entry
- ADV-2010-2858 vdb-entry vendor-advisory
- yaws-url-directory-traversal(62917) vdb-entry
- Debian Security Tracker CVE-2010-4181 vendor-advisory