Beveiligingsadvies

CVE-2006-3426

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2006-07-07 00:00:00

Laatst bijgewerkt 2024-08-07 18:30:33

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

Directory traversal vulnerability in (a) PatchLink Update Server (PLUS) before 6.1 P1 and 6.2.x before 6.2 SR1 P1 and (b) Novell ZENworks 6.2 SR1 and earlier allows remote attackers to overwrite arbitrary files and directories via a .. (dot dot) sequence in the (1) action, (2) agentid, or (3) index parameters to dagent/nwupload.asp, which are used as pathname components.

← Alle CVE's bekijken Bekijk op cve.org ↗