PT-2005-1631 · Ca · Ca License Client

Published 2005-03-02 · Updated 2021-04-09 · CVE-2005-0583

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions CA License Client version 0.1.0.15

Description A directory traversal issue allows remote attackers to create arbitrary files by using .. (dot dot) sequences in a PUTOLF request.

Recommendations For CA License Client version 0.1.0.15, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2005-0583

Affected Products

Ca License Client

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2005-0583 · Security Note
• http://supportconnectw.ca.com/public/ca_common_docs/security_notice.asp · Vendor Advisory
• http://idefense.com/application/poi/display?id=212&type=vulnerabilities · Vendor Advisory
• http://marc.info/?l=bugtraq&m=110979326828704&w=2 · Note