Unscored CVE-2004-1814 EUVD-2004-1807GHSA-q675-4hgh-wr56

Directory traversal vulnerability in VocalTec VGW4/8 Gateway 8.0 allows remote attackers to read protected files via .. (dot dot) sequences…

Published May 10, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in VocalTec VGW4/8 Gateway 8.0 allows remote attackers to read protected files via .. (dot dot) sequences in an HTTP request, as demonstrated using home.asp.

References

20040315 VocalTec Gateway 8 Reverse Directory Transversal + Authorization Bypass mailing-list
vgw48-gateway-directory-traversal(15476) vdb-entry
9876 vdb-entry