medium5.0Public exploit code
CVE-2005-4202
Multiple directory traversal vulnerabilities in LogiSphere 0.9.9j allow remote attackers to access arbitrary files via (1) ..
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- LogiSphere 0.9.9 j - URI Multiple Method Traversal Arbitrary File Access2005-12-12 · remote · windows · Verified
- LogiSphere 0.9.9 j - 'Search?NS-query-pat' Traversal Arbitrary File Access2005-12-12 · remote · windows · Verified
- LogiSphere 0.9.9 j - 'viewsource.jsp?source' Traversal Arbitrary File Access2005-12-12 · remote · windows · Verified
Impact
Multiple directory traversal vulnerabilities in LogiSphere 0.9.9j allow remote attackers to access arbitrary files via (1) .. (dot dot), (2) "..." (triple dot), and (3) "..//" sequences in the URL, (4) "../" sequences in the source parameter to viewsource.jsp, or (5) "..\" (dot dot backslash) sequences in the NS-query-pat parameter to the search URL. URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Logisphere | Logisphere | Version 0.9.9j |
References
- NVD record
- CVE.org record
- http://secunia.com/advisories/17989
- http://www.ipomonis.com/advisories/logisphere_server.zip
- http://www.securityfocus.com/bid/15807
- http://www.vupen.com/english/advisories/2005/2840
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23552
- http://secunia.com/advisories/17989
- http://www.ipomonis.com/advisories/logisphere_server.zip
- http://www.securityfocus.com/bid/15807
- http://www.vupen.com/english/advisories/2005/2840
- https://exchange.xforce.ibmcloud.com/vulnerabilities/23552