Path Traversal in Orb Networks
CVE-2008-5645
Directory traversal vulnerability in the media server in Orb Networks Orb before 2.01.0022 allows remote attackers to read arbitrary files via directory traversal sequences in an HTTP GET request.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.022 (80.5th percentile) — read the EPSS interpretation.
Affected products
- Orb_networks Orb — versions 2.00.0930, 2.00.0989, 2.0.1014
- N/a — versions n/a
Weakness classification (CWE)
References
- cve@mitre.org (Patch, vdb-entry, x_refsource_BID)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_VUPEN)
- cve@mitre.org (x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (mailing-list, Exploit, x_refsource_FULLDISC)
- cve@mitre.org (x_refsource_SECUNIA, third-party-advisory)