Skip to content
OpenAdvisories
Unscored CVE-2014-4507 EUVD-2014-4434GHSA-6wqr-674j-j3cx

Directory traversal vulnerability in Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to overwrite arbitr…

Published Jun 20, 2014 · Updated Sep 16, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in Smart-Proxy in Foreman before 1.4.5 and 1.5.x before 1.5.1 allows remote attackers to overwrite arbitrary files via a .. (dot dot) in the dst parameter to tftp/fetch_boot_file.

References