Total vulnerabilities in the database
Directory traversal vulnerability in the xsp component in mod_mono in Mono/C# web server, as used in SUSE Open-Enterprise-Server 1 and SUSE Linux 9.2 through 10.0, allows remote attackers to read arbitrary files via a .. (dot dot) sequence in an HTTP request.
| Software | From | Fixed in |
|---|---|---|
| suse / suse_open_enterprise_server | 1 | 1.x |
| mono / xsp | - | - |
| suse / suse_linux | 10.0 | 10.0.x |
| suse / suse_linux | 9.3 | 9.3.x |
| suse / suse_linux | 9.2 | 9.2.x |
| suse / suse_linux | 10.1 | 10.1.x |