Vulnerabilities > CVE-2004-2565 - Multiple vulnerability in Sambar Server 6.1

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
sambar
exploit available
NVD
Published: 2004-12-31
Updated: 2017-07-11

Summary

Multiple directory traversal vulnerabilities in Sambar Server 6.1 Beta 2 on Windows, and possibly other versions on Linux, when the administrative IP address restrictions have been modified from the default, allow remote authenticated users to read arbitrary files via (1) a "..\" (dot dot backslash) in the file parameter to showini.asp, or (2) an absolute path with drive letter in the log parameter to showlog.asp.

Vulnerable Configurations

Part Description Count
Application
Sambar
1

Exploit-Db

descriptionSambar Server 6.1 beta 2 showini.asp Arbitrary File Access. CVE-2004-2565. Remote exploit for windows platform
idEDB-ID:24163
last seen2016-02-02
modified2004-06-01
published2004-06-01
reporterOliver Karow
sourcehttps://www.exploit-db.com/download/24163/
titleSambar Server 6.1 beta 2 showini.asp Arbitrary File Access

References