PT-2013-2197 · Rack+1 · Rack+1
Raggic
·
Publicado
2013-02-08
·
Atualizado
2026-03-13
·
CVE-2013-0262
CVSS v2.0
4.3
Média
| Vetor | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Rack versions 1.4.x through 1.4.4
Rack versions 1.5.x through 1.5.1
Description
The issue allows attackers to access arbitrary files outside the intended root directory via a crafted
PATH INFO environment variable, probably a directory traversal vulnerability that is remotely exploitable, also known as "symlink path traversals."Recommendations
For Rack versions 1.4.x through 1.4.4, update to version 1.4.5 or later.
For Rack versions 1.5.x through 1.5.1, update to version 1.5.2 or later.
Exploit
Correção
Path traversal
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Rack
Suse