CVE-2006-3360 - CVE Reference - Advisories

CVE Reference: CVE-2006-3360

NOTE: The text on this page is written by CVE MITRE and reflects neither the opinions of Secunia or the results of our research. All data on this page is written and maintained by CVE MITRE.

Original Page at CVE MITRE: CVE-2006-3360

Description: Directory traversal vulnerability in index.php in phpSysInfo 2.5.1 allows remote attackers to determine the existence of arbitrary files via a .. (dot dot) sequence and a trailing null (%00) byte in the lng parameter, which will display a different error message if the file exists.

CVE Status: Candidate

References: XF http://xforce.iss.net/xforce/xfdb/27527 ST 1016440 SAID Secunia Advisory: SA20939 OSVDB 27015 FULLDISC http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0065.html http://archives.neohapsis.com/archives/fulldisclosure/2006-07/0066.html BID 18868

Return to the previous page.

Secunia PSI
Scan | Patch | Track
Free Download

Secunia Poll

Most Popular Advisories

1.	Cisco ASA and PIX Security Appliances Multiple Vulnerabilities

2.	rPath update for libtiff

3.	HP OpenView Select Identity Connectors Information Disclosure

4.	Gentoo update for realplayer

5.	Gentoo update for yelp

6.	FreeBSD ICMPv6 "Packet Too Big" MTU Denial of Service Vulnerability

7.	Gentoo update for dnsmasq

8.	IBM AIX "swcons" Command Privilege Escalation Vulnerability

9.	SUSE update for IBMJava5-JRE and java-1_5_0-ibm

10.	Najdi.si Toolbar Buffer Overflow Vulnerability