{"api_version":"1","generated_at":"2026-07-23T06:02:26+00:00","cve":"CVE-2005-3040","urls":{"html":"https://cve.report/CVE-2005-3040","api":"https://cve.report/api/cve/CVE-2005-3040.json","docs":"https://cve.report/api","cve_org":"https://www.cve.org/CVERecord?id=CVE-2005-3040","nvd":"https://nvd.nist.gov/vuln/detail/CVE-2005-3040"},"summary":{"title":"CVE-2005-3040","description":"Directory traversal vulnerability in the web interface (ISALogin.dll) for TAC Vista 4.0, and possibly other versions before 4.3, allows remote attackers to read arbitrary files via \"..\" sequences in the Template parameter.","state":"PUBLISHED","assigner":"mitre","published_at":"2005-09-22 10:03:00","updated_at":"2025-04-03 01:03:51"},"problem_types":["NVD-CWE-Other","n/a"],"metrics":[{"version":"2.0","source":"nvd@nist.gov","type":"Primary","score":"5","severity":"","vector":"AV:N/AC:L/Au:N/C:P/I:N/A:N","data":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"}}],"references":[{"url":"http://secunia.com/advisories/16854","name":"http://secunia.com/advisories/16854","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"title":"Secunia - Advisories - TAC Vista \"Template\" Disclosure of Sensitive Information Vulnerability","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0469.html","name":"http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0469.html","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":[],"title":"Neohapsis Archives - Full Disclosure List - #0469 - [Full-disclosure] [CIRT.DK - Advisory 37] TAC Vista Webstation 3.0 Directory Traversal bug in webinterface","mime":"text/html","httpstatus":"-1","archivestatus":"200"},{"url":"http://www.cirt.dk/advisories/cirt-37-advisory.pdf","name":"http://www.cirt.dk/advisories/cirt-37-advisory.pdf","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"],"title":"eCrimeLabs - Helps you mitigate your cyber threats","mime":"application/pdf","httpstatus":"404","archivestatus":"200"},{"url":"http://www.osvdb.org/19479","name":"http://www.osvdb.org/19479","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit"],"title":"","mime":"","httpstatus":"-1","archivestatus":"0"},{"url":"http://securitytracker.com/id?1014923","name":"http://securitytracker.com/id?1014923","refsource":"af854a3a-2127-422b-91ae-364da2661108","tags":["Exploit","Vendor Advisory"],"title":"TAC Vista Input Validation Flaw in 'Template' Parameter Lets Remote Users Traverse the Directory - SecurityTracker","mime":"text/html","httpstatus":"200","archivestatus":"200"},{"url":"https://www.cve.org/CVERecord?id=CVE-2005-3040","name":"CVE Program record","refsource":"CVE.ORG","tags":["canonical"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2005-3040","name":"NVD vulnerability detail","refsource":"NVD","tags":["canonical","analysis"]}],"affected":[{"source":"CNA","vendor":"n/a","product":"n/a","version":"affected n/a","platforms":[]}],"timeline":[],"solutions":[],"workarounds":[],"exploits":[],"credits":[],"nvd_cpes":[{"cve_year":"2005","cve_id":"3040","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tac","cpe5":"vista","cpe6":"3.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"},{"cve_year":"2005","cve_id":"3040","vulnerable":"1","versionEndIncluding":"","cpe1":"cpe","cpe2":"2.3","cpe3":"a","cpe4":"tac","cpe5":"vista","cpe6":"4.0","cpe7":"*","cpe8":"*","cpe9":"*","cpe10":"*","cpe11":"*","cpe12":"*","cpe13":"*"}],"vendor_comments":[],"enrichments":{"kev":null,"epss":null,"legacy_qids":[]},"source_records":{"cve_program":{"containers":{"adp":[{"providerMetadata":{"dateUpdated":"2024-08-07T22:53:30.477Z","orgId":"af854a3a-2127-422b-91ae-364da2661108","shortName":"CVE"},"references":[{"name":"1014923","tags":["vdb-entry","x_refsource_SECTRACK","x_transferred"],"url":"http://securitytracker.com/id?1014923"},{"name":"19479","tags":["vdb-entry","x_refsource_OSVDB","x_transferred"],"url":"http://www.osvdb.org/19479"},{"name":"20050916 [CIRT.DK - Advisory 37] TAC Vista Webstation 3.0 Directory Traversal bug in webinterface","tags":["mailing-list","x_refsource_FULLDISC","x_transferred"],"url":"http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0469.html"},{"tags":["x_refsource_MISC","x_transferred"],"url":"http://www.cirt.dk/advisories/cirt-37-advisory.pdf"},{"name":"16854","tags":["third-party-advisory","x_refsource_SECUNIA","x_transferred"],"url":"http://secunia.com/advisories/16854"}],"title":"CVE Program Container"}],"cna":{"affected":[{"product":"n/a","vendor":"n/a","versions":[{"status":"affected","version":"n/a"}]}],"descriptions":[{"lang":"en","value":"Directory traversal vulnerability in the web interface (ISALogin.dll) for TAC Vista 4.0, and possibly other versions before 4.3, allows remote attackers to read arbitrary files via \"..\" sequences in the Template parameter."}],"problemTypes":[{"descriptions":[{"description":"n/a","lang":"en","type":"text"}]}],"providerMetadata":{"dateUpdated":"2005-09-22T04:00:00.000Z","orgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","shortName":"mitre"},"references":[{"name":"1014923","tags":["vdb-entry","x_refsource_SECTRACK"],"url":"http://securitytracker.com/id?1014923"},{"name":"19479","tags":["vdb-entry","x_refsource_OSVDB"],"url":"http://www.osvdb.org/19479"},{"name":"20050916 [CIRT.DK - Advisory 37] TAC Vista Webstation 3.0 Directory Traversal bug in webinterface","tags":["mailing-list","x_refsource_FULLDISC"],"url":"http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0469.html"},{"tags":["x_refsource_MISC"],"url":"http://www.cirt.dk/advisories/cirt-37-advisory.pdf"},{"name":"16854","tags":["third-party-advisory","x_refsource_SECUNIA"],"url":"http://secunia.com/advisories/16854"}],"x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cve@mitre.org","ID":"CVE-2005-3040","STATE":"PUBLIC"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"n/a","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"n/a"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"Directory traversal vulnerability in the web interface (ISALogin.dll) for TAC Vista 4.0, and possibly other versions before 4.3, allows remote attackers to read arbitrary files via \"..\" sequences in the Template parameter."}]},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"n/a"}]}]},"references":{"reference_data":[{"name":"1014923","refsource":"SECTRACK","url":"http://securitytracker.com/id?1014923"},{"name":"19479","refsource":"OSVDB","url":"http://www.osvdb.org/19479"},{"name":"20050916 [CIRT.DK - Advisory 37] TAC Vista Webstation 3.0 Directory Traversal bug in webinterface","refsource":"FULLDISC","url":"http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0469.html"},{"name":"http://www.cirt.dk/advisories/cirt-37-advisory.pdf","refsource":"MISC","url":"http://www.cirt.dk/advisories/cirt-37-advisory.pdf"},{"name":"16854","refsource":"SECUNIA","url":"http://secunia.com/advisories/16854"}]}}}},"cveMetadata":{"assignerOrgId":"8254265b-2729-46b6-b9e3-3dfca2d5bfca","assignerShortName":"mitre","cveId":"CVE-2005-3040","datePublished":"2005-09-22T04:00:00.000Z","dateReserved":"2005-09-22T00:00:00.000Z","dateUpdated":"2024-09-16T20:31:26.618Z","state":"PUBLISHED"},"dataType":"CVE_RECORD","dataVersion":"5.1"},"nvd":{"publishedDate":"2005-09-22 10:03:00","lastModifiedDate":"2025-04-03 01:03:51","problem_types":["NVD-CWE-Other","n/a"],"metrics":{"cvssMetricV2":[{"source":"nvd@nist.gov","type":"Primary","cvssData":{"version":"2.0","vectorString":"AV:N/AC:L/Au:N/C:P/I:N/A:N","baseScore":5,"accessVector":"NETWORK","accessComplexity":"LOW","authentication":"NONE","confidentialityImpact":"PARTIAL","integrityImpact":"NONE","availabilityImpact":"NONE"},"baseSeverity":"MEDIUM","exploitabilityScore":10,"impactScore":2.9,"acInsufInfo":false,"obtainAllPrivilege":false,"obtainUserPrivilege":false,"obtainOtherPrivilege":false,"userInteractionRequired":false}]},"configurations":[{"nodes":[{"operator":"OR","negate":false,"cpeMatch":[{"vulnerable":true,"criteria":"cpe:2.3:a:tac:vista:3.0:*:*:*:*:*:*:*","matchCriteriaId":"25CCD374-BAAB-4F77-B787-C4A1809FDF1E"},{"vulnerable":true,"criteria":"cpe:2.3:a:tac:vista:4.0:*:*:*:*:*:*:*","matchCriteriaId":"7B2ECC29-1B0E-45F8-9302-AE01EBA08328"}]}]}]},"legacy_mitre":{"record":{"CveYear":"2005","CveId":"3040","Ordinal":"1","Title":"CVE-2005-3040","CVE":"CVE-2005-3040","Year":"2005"},"notes":[{"CveYear":"2005","CveId":"3040","Ordinal":"1","NoteData":"Directory traversal vulnerability in the web interface (ISALogin.dll) for TAC Vista 4.0, and possibly other versions before 4.3, allows remote attackers to read arbitrary files via \"..\" sequences in the Template parameter.","Type":"Description","Title":"CVE-2005-3040"},{"CveYear":"2005","CveId":"3040","Ordinal":"2","NoteData":"2005-09-22","Type":"Other","Title":"Published"}]}}}