CVE-2004-2745

Directory traversal vulnerability in Anteco Visual Technologies OwnServer 1.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in a URL.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2004-12-31

Last modified

2024-08-08

Weaknesses

CWE-22

Affected products

• Ownserver (Anteco Visual Technologies)

References

• http://securityreason.com/securityalert/3329
• http://www.securityfocus.com/archive/1/350421/30/21610/threaded
• http://www.securityfocus.com/bid/9461
• http://www.securitytracker.com/id?1008800