[Forgot Password]
Login  Register Subscribe

23631

 
 

122183

 
 

98060

 
 

909

 
 

79198

 
 

109

Paid content will be excluded from the download.


Download | Alert*
CVE
view XML

CVE-2009-0497

Date: (C)2009-02-09   (M)2017-08-08 


Directory traversal vulnerability in log.jsp in Ignite Realtime Openfire 3.6.2 allows remote attackers to read arbitrary files via a ..\ (dot dot backslash) in the log parameter.

CVSS Score: 5.0Access Vector: NETWORK
Exploit Score: 10.0Access Complexity: LOW
Impact Score: 2.9Authentication: NONE
 Confidentiality: PARTIAL
 Integrity: NONE
 Availability: NONE





Reference:
http://www.securityfocus.com/archive/1/archive/1/499880/100/0/threaded
BID-32945
SECUNIA-33452
http://svn.igniterealtime.org/svn/repos/openfire/trunk/src/web/log.jsp
http://www.coresecurity.com/content/openfire-multiple-vulnerabilities
https://bugs.gentoo.org/show_bug.cgi?id=257585
openfire-log-directory-traversal(47806)

CWE    1
CWE-22

© 2013 SecPod Technologies