Description
Unspecified vulnerability in Secure Elements Class 5 AVR client and server (aka C5 EVM) before 2.8.1 allows authenticated attackers to overwrite arbitrary files (1) on a server during an update or (2) on a client via modified pathnames, possibly due to a directory traversal issue.
References
- http://www.kb.cert.org/vuls/id/WDON-6QAPC5
- 20378 third-party-advisory
- ADV-2006-2069 vdb-entry
- c5emv-client-pathname-file-overwrite(26771) vdb-entry
- 1016184 vdb-entry
- http://www.kb.cert.org/vuls/id/WDON-6QAJFA
- VU#764025 third-party-advisory
- VU#912217 third-party-advisory