CVE-2010-4181

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

• Yaws 1.89 - Directory Traversal2010-11-01 · remote · windows

Impact

Directory traversal vulnerability in Yaws 1.89 allows remote attackers to read arbitrary files via ..\ (dot dot backslash) and other sequences.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://osvdb.org/68962
• http://secunia.com/advisories/42066
• http://www.exploit-db.com/exploits/15371
• http://www.securityfocus.com/bid/44564
• http://www.vupen.com/english/advisories/2010/2858
• https://exchange.xforce.ibmcloud.com/vulnerabilities/62917
• http://osvdb.org/68962
• http://secunia.com/advisories/42066
• http://www.exploit-db.com/exploits/15371
• http://www.securityfocus.com/bid/44564
• http://www.vupen.com/english/advisories/2010/2858
• https://exchange.xforce.ibmcloud.com/vulnerabilities/62917