Unscored CVE-2006-3885 EUVD-2006-3879GHSA-3jmm-5p7r-97g4

Directory traversal vulnerability in Check Point Firewall-1 R55W before HFA03 allows remote attackers to read arbitrary files via an encode…

Published Jul 27, 2006 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in Check Point Firewall-1 R55W before HFA03 allows remote attackers to read arbitrary files via an encoded .. (dot dot) in the URL on TCP port 18264.

References

20060726 Re: Check Point R55W Directory Traversal mailing-list
fw1-encoded-characters-directory-traversal(27937) vdb-entry
1290 third-party-advisory
20060724 Check Point R55W Directory Traversal mailing-list
19136 vdb-entry
21200 third-party-advisory
1016563 vdb-entry
http://www.sec-tec.co.uk/vulnerability/r55w_directory_traversal.html
ADV-2006-2965 vdb-entry