CVE-2011-4696 Directory traversal vulnerability in Eye-Fi Helper before 3.4.23 allows man-in-the-middle attackers to create arbitrary files via a .. (dot dot) in the filesignature in a GetPhotoStatus request.
MediumCVSS 4.3
EPSS 0.79%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Eye-Fi Helper before 3.4.23 allows man-in-the-middle attackers to create arbitrary files via a .. (dot dot) in the filesignature in a GetPhotoStatus request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| eye-fi helper | <= 3.3.0 | No fix listed |
| eye-fi helper | = 2.0.3.0 | No fix listed |
| eye-fi helper | = 2.0.4.0 | No fix listed |
| eye-fi helper | = 2.5.1.0 | No fix listed |
| eye-fi helper | = 2.5.4.0 | No fix listed |
| eye-fi helper | = 2.5.5.0 | No fix listed |
| eye-fi helper | = 2.5.26.0 | No fix listed |
| eye-fi helper | = 2.5.27.0 | No fix listed |
| eye-fi helper | = 2.6.0.0 | No fix listed |
| eye-fi helper | = 2.6.9.0 | No fix listed |
| eye-fi helper | = 2.6.12.0 | No fix listed |
| eye-fi helper | = 3.1.2 | No fix listed |
| eye-fi helper | = 3.1.9 | No fix listed |
| eye-fi helper | = 3.2.2 | No fix listed |
References
- www.pentest.co.uk exploit
- 57163 vdb-entry
- eyefihelper-getphotostatus-dir-traversal(80995) vdb-entry