Unscored CVE-2001-0853 EUVD-2001-0836GHSA-c4jx-rv29-5jqp

Directory traversal vulnerability in Entrust GetAccess allows remote attackers to read arbitrary files via a .. (dot dot) in the locale par…

Published Nov 22, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in Entrust GetAccess allows remote attackers to read arbitrary files via a .. (dot dot) in the locale parameter to (1) helpwin.gas.bat or (2) AboutBox.gas.bat.

References

20011105 Entrust Bulletin E01-005: GetAccess Access Service vulnerability mailing-list
20011105 New getAccess[tm] Vulnerability mailing-list
getaccess-shellscripts-retrieve-files(7474) vdb-entry
3508 vdb-entry
VU#243243 third-party-advisory