Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2005-3123

Опубликовано: 30 окт. 2005
Источник: nvd
CVSS2: 5
EPSS Низкий

Описание

Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted sequences such as "/.//..//////././", which is collapsed into "/.././" after ".." and "//" sequences are removed.

Ссылки

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:gnu:gnump3d:2.9:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnump3d:2.9.1:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnump3d:2.9.2:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnump3d:2.9.3:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnump3d:2.9.4:*:*:*:*:*:*:*
cpe:2.3:a:gnu:gnump3d:2.9.5:*:*:*:*:*:*:*

EPSS

Процентиль: 78%
0.01258
Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

ubuntu логотип

CVE-2005-3123

ubuntu
почти 20 лет назад

Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted sequences such as "/.//..//////././", which is collapsed into "/.././" after ".." and "//" sequences are removed.

debian логотип

CVE-2005-3123

debian
почти 20 лет назад

Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remot ...

github логотип

GHSA-r269-qx8f-58hh

github
больше 3 лет назад

Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted sequences such as "/.//..//////././", which is collapsed into "/.././" after ".." and "//" sequences are removed.

EPSS

Процентиль: 78%
0.01258
Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other