CVE-2008-5645

Directory traversal vulnerability in the media server in Orb Networks Orb before 2.01.0022 allows remote attackers to read arbitrary files via directory traversal sequences in an HTTP GET request.

Score

CVSS 2.0 7.8 High

Status

Modified - cve@mitre.org

Published

2008-12-17

Last modified

2024-08-07

Weaknesses

CWE-22

Affected products

• Orb (Orb Networks)

References

• http://marc.info/?l=full-disclosure&m=122606860208526&w=2
• http://secunia.com/advisories/32592
• http://securityreason.com/securityalert/4773
• http://www.securityfocus.com/bid/32187
• http://www.vupen.com/english/advisories/2008/3082
• https://exchange.xforce.ibmcloud.com/vulnerabilities/46461