CVE-2005-3559

UNKNOWN

Directory traversal vulnerability in vmail

Published Nov 16, 2005

Modified 1 years ago

Details

Directory traversal vulnerability in vmail.cgi in Asterisk 1.0.9 through 1.2.0-beta1 allows remote attackers to access WAV files via a .. (dot dot) in the folder parameter.

References

WEBhttp://osvdb.org/20577 ADVISORYhttp://secunia.com/advisories/17459 ADVISORYhttp://secunia.com/advisories/19872 WEBhttp://securitytracker.com/id?1015164 WEBhttp://www.assurance.com.au/advisories/200511-asterisk.txt ADVISORYhttp://www.debian.org/security/2006/dsa-1048 WEBhttp://www.securityfocus.com/archive/1/415990/30/0/threaded WEBhttp://www.securityfocus.com/bid/15336 WEBhttp://www.vupen.com/english/advisories/2005/2346 WEBhttps://exchange.xforce.ibmcloud.com/vulnerabilities/23002 ADVISORYhttps://www.cve.org/CVERecord?id=CVE-2005-3559

CVSS Analysis

CVSS v2.0

5.0

Exploitability

Access Vector

NetworkAV:N

Access Complexity

LowAC:L

Authentication

NoneAu:N

Impact

Confidentiality

PartialC:P

Integrity

NoneI:N

Availability

NoneA:N

5/AV:N/AC:L/Au:N/C:P/I:N/A:N

Ecosystems

Timeline

PublishedNov 16, 2005

ModifiedAug 7, 2024

CVE-2005-3559 | Mondoo Vulnerability Intelligence