medium5.0Public exploit code
CVE-2005-4510
Directory traversal vulnerability in server.np in NetPublish Server 7 allows remote attackers to read arbitrary files via "../" sequences in the template param…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Extensis Portfolio Netpublish Server 7.0 - Server.NP Directory Traversal2005-12-20 · webapps · cgi · Verified
Impact
Directory traversal vulnerability in server.np in NetPublish Server 7 allows remote attackers to read arbitrary files via "../" sequences in the template parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Extensis | Netpublish Server | Version 7.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=113511429307550&w=2
- http://secunia.com/advisories/18173
- http://securitytracker.com/id?1015393
- http://www.extensis.com/en/support/kb_article.jsp?articleNumber=3302201
- http://www.securityfocus.com/bid/15974
- http://www.vupen.com/english/advisories/2005/3045
- http://marc.info/?l=bugtraq&m=113511429307550&w=2
- http://secunia.com/advisories/18173
- http://securitytracker.com/id?1015393
- http://www.extensis.com/en/support/kb_article.jsp?articleNumber=3302201
- http://www.securityfocus.com/bid/15974
- http://www.vupen.com/english/advisories/2005/3045