Path Traversal in Emc Homebase Server
CVE-2010-0620
Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2 allows remote attackers to overwrite arbitrary files with any content, and consequently execute arbitrary code, via a .. (dot dot) in an unspecified parameter.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.195 (97.1th percentile) — read the EPSS interpretation.
Affected products
- Emc Homebase_server — versions 6.2, 6.3
- N/a — versions n/a
Weakness classification (CWE)
References
- security_alert@emc.com (x_refsource_SREASON, third-party-advisory)
- security_alert@emc.com (mailing-list, x_refsource_BUGTRAQ)
- security_alert@emc.com (Exploit, vdb-entry, x_refsource_BID)
- security_alert@emc.com (vdb-entry, x_refsource_VUPEN, Vendor Advisory)
- security_alert@emc.com (x_refsource_MISC)