CVE-2005-1230

Directory traversal vulnerability in Yawcam 0.2.5 allows remote attackers to read arbitrary files via "..\" (dot dot backslash) sequences in a GET request.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2005-05-02

Last modified

2024-08-07

Affected products

• Yawcam (Magnus Lundvall)

References

• http://marc.info/?l=bugtraq&m=111410564915961&w=2
• http://secunia.com/advisories/15052
• http://www.autistici.org/fdonato/advisory/Yawcam0.2.5-adv.txt
• http://www.osvdb.org/15732