PT-2005-1700 · Computalynx · Ccproxy

Kristof Philipsen · Publicado 2005-03-07 · Atualizado 2017-07-11 · CVE-2005-0657

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions Computalynx CProxy versions 3.3.x through 3.4.4

Description The issue allows remote attackers to read arbitrary files or cause a denial of service via a .. (dot dot) in an HTTP request. This can lead to unauthorized access to sensitive information or disruption of service.

Recommendations For versions 3.3.x through 3.4.4, consider restricting access to sensitive files and directories to minimize the risk of exploitation. As a temporary workaround, consider implementing additional validation and sanitization of HTTP requests to prevent directory traversal attacks.

Exploit

Correção

Identificadores relacionados

CVE-2005-0657

Produtos afetados

Ccproxy

Referências · 5

• 🔥 http://secunia.com/advisories/14461 · Exploit
• http://marc.info/?l=bugtraq&m=110980096304013&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19573 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2005-0657 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19574 · Nota