CVE-2010-3306
Directory traversal vulnerability in the modURL function in instance.c in Weborf before 0.12.3 allows remote attackers to read arbitrary files via ..%2f sequences in a URI.
| Software | From | Fixed in |
|---|---|---|
| salvo_g._tomaselli / weborf | 0.7 | 0.7.x |
| salvo_g._tomaselli / weborf | 0.9 | 0.9.x |
| salvo_g._tomaselli / weborf | 0.11 | 0.11.x |
| salvo_g._tomaselli / weborf | 0.3 | 0.3.x |
| salvo_g._tomaselli / weborf | - | 0.12.2.x |
| salvo_g._tomaselli / weborf | 0.6 | 0.6.x |
| salvo_g._tomaselli / weborf | 0.12 | 0.12.x |
| salvo_g._tomaselli / weborf | 0.12.1 | 0.12.1.x |
| salvo_g._tomaselli / weborf | 0.4 | 0.4.x |
| salvo_g._tomaselli / weborf | 0.5 | 0.5.x |
| salvo_g._tomaselli / weborf | 0.10 | 0.10.x |
| salvo_g._tomaselli / weborf | 0.8 | 0.8.x |
- http://code.google.com/p/weborf/source/detail?r=464
- http://galileo.dmi.unict.it/wiki/weborf/doku.php?id=news:released_0.12.3
- http://secunia.com/advisories/41286
- http://www.exploit-db.com/exploits/14925/
- http://www.openwall.com/lists/oss-security/2010/09/17/3
- http://www.openwall.com/lists/oss-security/2010/09/17/8
- http://www.osvdb.org/67840
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime