NetSight
IP …
medium4.0Public exploit code

CVE-2009-4511

Multiple directory traversal vulnerabilities in the web administration interface on the TANDBERG Video Communication Server (VCS) before X5.1 allow remote auth…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple directory traversal vulnerabilities in the web administration interface on the TANDBERG Video Communication Server (VCS) before X5.1 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the page parameter to (1) helppage.php or (2) user/helppage.php.

Affected products

VendorProductAffected versions
VsecurityTandberg Video Communication Server
through x4.3.0
Versions x1.0.0, x1.1.0, x1.2.0, x2.0.0, x2.1.0

Weakness classification

CWE-200

References