Lucene search

K
cveMitreCVE-2006-5596
HistoryOct 28, 2006 - 12:07 a.m.

CVE-2006-5596

2006-10-2800:07:00
mitre
web.nvd.nist.gov
28
cve-2006-5596
directory traversal
ssl server
aep smartgate
remote file download

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.007

Percentile

80.2%

Directory traversal vulnerability in the SSL server in AEP Smartgate 4.3b allows remote attackers to download arbitrary files via …\ (dot dot backslash) sequences in an HTTP GET request.

Affected configurations

Nvd
Node
aep_networkssmartgate_ssl_serverMatch4.3b
VendorProductVersionCPE
aep_networkssmartgate_ssl_server4.3bcpe:2.3:a:aep_networks:smartgate_ssl_server:4.3b:*:*:*:*:*:*:*

CVSS2

7.5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

AI Score

7.2

Confidence

Low

EPSS

0.007

Percentile

80.2%

Related for CVE-2006-5596