PT-2004-2713 · Vocaltec · Vocaltec Vgw4/8 Gateway

Rafel Ivgi + 1 · Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-1814

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions VocalTec VGW4/8 Gateway version 8.0

Description A directory traversal issue allows remote attackers to read protected files by using .. (dot dot) sequences in an HTTP request. This has been demonstrated using the home.asp file.

Recommendations For VocalTec VGW4/8 Gateway version 8.0, consider restricting access to sensitive files and directories to minimize the risk of exploitation until a patch is available. As a temporary workaround, limit the use of HTTP requests that contain .. (dot dot) sequences.

Exploit

Fix

Related Identifiers

CVE-2004-1814

Affected Products

Vocaltec Vgw4/8 Gateway

References · 4

• 🔥 http://securityfocus.com/bid/9876 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1814 · Security Note
• http://marc.info/?l=bugtraq&m=107936739131657&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15476 · Note