Unscored CVE-2005-2731 EUVD-2005-2732GHSA-44vp-vgqf-7p46

Directory traversal vulnerability in Astaro Security Linux 6.0, when using Webmin, allows remote authenticated webmin users to read arbitra…

Published Aug 29, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in Astaro Security Linux 6.0, when using Webmin, allows remote authenticated webmin users to read arbitrary files via a .. (dot dot) in the wfe_download parameter to index.fpl.

References

20050825 Astaro Security Linux 6.0 - HTTP CONNECT Access Localhost Weakness mailing-list