PT-2005-2666 · Sap · Sap Internet Graphics Server

Publicado 2005-07-26 · Atualizado 2008-09-05 · CVE-2005-1691

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions SAP Internet Graphics Server versions prior to 6.40 Patch 11

Description The issue allows remote attackers to read arbitrary files via ".." sequences in an HTTP GET request. This is a directory traversal vulnerability.

Recommendations For versions prior to 6.40 Patch 11, update to 6.40 Patch 11 or later to resolve the issue.

Exploit

Correção

Identificadores relacionados

CVE-2005-1691

Produtos afetados

Sap Internet Graphics Server

Referências · 2

• 🔥 http://corsaire.com/advisories/c050503-001.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-1691 · Nota de Segurança