CVE-2006-0847 - Secunia Advisories - Vulnerability Information

CVE Reference: CVE-2006-0847
NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-0847

Description: Directory traversal vulnerability in the staticfilter component in CherryPy before 2.1.1 allows remote attackers to read arbitrary files via ".." sequences in unspecified vectors.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/24809 SAID Secunia Advisory: SA18944 Secunia Advisory: SA20344 GENTOO http://www.gentoo.org/security/en/glsa/glsa-200605-16.xml CONFIRM http://www.cherrypy.org/ http://groups.google.com/group/cherrypy-announce/browse_thread/thread/92b2972f774fe6df/2f63afc9433dc306#2f63afc9433dc306 http://sourceforge.net/project/shownotes.php?release_id=384316&group_id=56099 BID 16760

Return to the previous page.