PT-2006-5290 · Cybozu · Cybozu Office+1

Tan Chew Keong

·

Publicado

2006-08-31

·

Atualizado

2017-07-20

·

CVE-2006-4490

CVSS v2.0

4.0

Média

VetorAV:N/AC:L/Au:S/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Cybozu Office versions prior to 6.6 Build 1.3 Cybozu Share 360 versions prior to 2.5 Build 0.3
Description The issue allows remote authenticated users to read arbitrary files via a .. (dot dot) sequence in the id parameter. This can be exploited through scripts in (1) cbag/ag.exe or (2) s360v2/s360.exe.
Recommendations For Cybozu Office versions prior to 6.6 Build 1.3, update to version 6.6 Build 1.3 or later. For Cybozu Share 360 versions prior to 2.5 Build 0.3, update to version 2.5 Build 0.3 or later.

Exploit

Correção

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Identificadores relacionados

CVE-2006-4490

Produtos afetados

Cybozu Office
Cybozu Share 360