Vulnerabilities > CVE-2006-2100 - Directory Traversal vulnerability in MagicISO

047910
CVSS 7.8 - HIGH
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
NONE
Availability impact
NONE
network
low complexity
magic-iso-maker
exploit available
NVD
Published: 2006-04-29
Updated: 2018-10-18

Summary

Directory traversal vulnerability in Magic ISO 5.0 Build 0166 allows remote attackers to write arbitrary files via a .. (dot dot) in a filename in an ISO image.

Vulnerable Configurations

Part Description Count
Application
Magic_Iso_Maker
1

Exploit-Db

descriptionMagicISO 5.0 Build 0166 Directory Traversal Vulnerability. CVE-2006-2100. Remote exploit for windows platform
idEDB-ID:27759
last seen2016-02-03
modified2006-04-28
published2006-04-28
reporterSowhat
sourcehttps://www.exploit-db.com/download/27759/
titlemagiciso 5.0 build 0166 - Directory Traversal Vulnerability

References