PT-2005-1700 · Computalynx · Ccproxy

Kristof Philipsen · Published 2005-03-07 · Updated 2017-07-11 · CVE-2005-0657

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:P

Name of the Vulnerable Software and Affected Versions Computalynx CProxy versions 3.3.x through 3.4.4

Description The issue allows remote attackers to read arbitrary files or cause a denial of service via a .. (dot dot) in an HTTP request. This can lead to unauthorized access to sensitive information or disruption of service.

Recommendations For versions 3.3.x through 3.4.4, consider restricting access to sensitive files and directories to minimize the risk of exploitation. As a temporary workaround, consider implementing additional validation and sanitization of HTTP requests to prevent directory traversal attacks.

Exploit

Fix

Related Identifiers

CVE-2005-0657

Affected Products

Ccproxy

References · 5

• 🔥 http://secunia.com/advisories/14461 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2005-0657 · Security Note
• http://marc.info/?l=bugtraq&m=110980096304013&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19573 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19574 · Note