CVE-2006-5596

EPSS 3.0%

Directory traversal vulnerability in the SSL server in AEP Smartgate 4.3b allows remote attackers to download arbitrary files via ..\ (dot dot backslash) sequences in an HTTP GET request.

Affected products

n/a · n/a

public PoCs found — 1

cve_referencewww.exploit-db.com/exploits/2637unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://secunia.com/advisories/22550 https://exchange.xforce.ibmcloud.com/vulnerabilities/29817 https://prdelka.blackart.org.uk/exploitz/prdelka-vs-AEP-smartgate.c https://www.exploit-db.com/exploits/2637 http://www.securityfocus.com/bid/20722 http://www.vupen.com/english/advisories/2006/4224