Domain Technologie Control Directory Traversal Vulnerability

Bugtraq ID:	68723
Class:	Input Validation Error
CVE:	CVE-2011-5273
Remote:	Yes
Local:	No
Published:	Aug 13 2011 12:00AM
Updated:	Aug 13 2011 12:00AM
Credit:	Ansgar Burchardt
Vulnerable:	Domain Technologie Control Domain Technologie Control 0.32.11 Domain Technologie Control Domain Technologie Control 0.32.8 Domain Technologie Control Domain Technologie Control 0.32.7 Domain Technologie Control Domain Technologie Control 0.29.16 Domain Technologie Control Domain Technologie Control 0.25.1 Domain Technologie Control Domain Technologie Control 0.24.5 r0 Domain Technologie Control Domain Technologie Control 0.24.5 Domain Technologie Control Domain Technologie Control 0.32.10 Domain Technologie Control Domain Technologie Control 0.32 Domain Technologie Control Domain Technologie Control 0.29.18-1+lenny2 Domain Technologie Control Domain Technologie Control 0.29.17 Domain Technologie Control Domain Technologie Control 0.25
Not Vulnerable:	Domain Technologie Control Domain Technologie Control 0.32.12 Domain Technologie Control Domain Technologie Control 0.34

Domain Technologie Control Directory Traversal Vulnerability

Domain Technologie Control is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input.

Remote attackers can use a specially crafted request with directory-traversal sequences ('../') to retrieve arbitrary files in the context of the application. Information obtained could aid in further attacks.

Domain Technologie Control Directory Traversal Vulnerability

Attackers can exploit this issue through a browser.