CVE-2014-9609 Directory traversal vulnerability in webadmin/reporter/view_server_log.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to list directory contents vi...
MediumCVSS 5.3
EPSS 12.6%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in webadmin/reporter/view_server_log.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to list directory contents via a .. (dot dot) in the log parameter in a stats action.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| netsweeper | < 3.1.10 | 3.1.10 |
| netsweeper | >= 4.0.0, < 4.0.9 | 4.0.9 |
| netsweeper | >= 4.1.0, < 4.1.2 | 4.1.2 |
References
- packetstormsecurity.com third-party-advisory vdb-entry