Vulnerability in N/a

CVE-2005-1939

Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." (dot dot) sequences in a request to the Report service (TCP 8022).

EPSS: 0.629 (99.1th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

References

15500 (x_refsource_SECUNIA, third-party-advisory)
cirt.dk/advisories/cirt-40-advisory.pdf (x_refsource_MISC)
whatsup-smallbusiness-dotdot-traversal(22969) (vdb-entry, x_refsource_XF)
15291 (vdb-entry, x_refsource_BID)
1015141 (vdb-entry, x_refsource_SECTRACK)
secunia.com/secunia_research/2005-14/advisory/ (x_refsource_MISC)