Path Traversal in Kepler Lam Iptools

CVE-2012-5344

Directory traversal vulnerability in the WebServer (Thttpd.bat) in IpTools (aka Tiny TCP/IP server) 0.1.4 allows remote attackers to read arbitrary files via a .. (dot dot) in a HTTP request.

Vulnerability class: Path Traversal (Directory Traversal)

EPSS: 0.072 (93.6th percentile) — read the EPSS interpretation.

Affected products

Kepler_lam Iptools — versions 0.1.4
N/a — versions n/a

Weakness classification (CWE)

CWE-22 — Path Traversal

References

cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)