Xangati XSR And XNR Multiple Directory Traversal Vulnerabilities
BID:66817
Info
Xangati XSR And XNR Multiple Directory Traversal Vulnerabilities
| Bugtraq ID: | 66817 |
| Class: | Input Validation Error |
| CVE: |
CVE-2014-0358 |
| Remote: | Yes |
| Local: | No |
| Published: | Apr 14 2014 12:00AM |
| Updated: | Apr 14 2014 12:00AM |
| Credit: | Jan Kadijk |
| Vulnerable: |
Xangati XSR 10 Xangati XNR 6 |
| Not Vulnerable: |
Xangati XSR 11 Xangati XNR 7 |
Discussion
Xangati XSR And XNR Multiple Directory Traversal Vulnerabilities
Xangati XSR And XNR are prone to a multiple directory-traversal vulnerabilities.
A remote attacker could exploit these vulnerabilities using directory-traversal characters ('../') to access or read arbitrary files that contain sensitive information.
Xangati XSR prior to 11 and XNR prior to 7 are vulnerable.
Xangati XSR And XNR are prone to a multiple directory-traversal vulnerabilities.
A remote attacker could exploit these vulnerabilities using directory-traversal characters ('../') to access or read arbitrary files that contain sensitive information.
Xangati XSR prior to 11 and XNR prior to 7 are vulnerable.
References
Xangati XSR And XNR Multiple Directory Traversal Vulnerabilities
References:
References:
- xangati XSR and XNR homepage (xangati)
- Vulnerability Note VU#657622 (CERT)