Directory traversal vulnerability in EMC Navisphere Manager 6.4.1.0.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Navisphere_manager | Emc | 6.4 (including) | 6.4 (including) |
| Navisphere_manager | Emc | 6.4.1.0.0 (including) | 6.4.1.0.0 (including) |
| Navisphere_manager | Emc | 6.5 (including) | 6.5 (including) |
| Navisphere_manager | Emc | 6.6 (including) | 6.6 (including) |
References
- http://secunia.com/advisories/16344
- http://securitytracker.com/id?1014629
- http://www.idefense.com/application/poi/display?id=288\u0026type=vulnerabilities\u0026flashstatus=true
- http://www.securityfocus.com/bid/14487
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21726
- http://secunia.com/advisories/16344
- http://securitytracker.com/id?1014629
- http://www.idefense.com/application/poi/display?id=288\u0026type=vulnerabilities\u0026flashstatus=true
- http://www.securityfocus.com/bid/14487
- https://exchange.xforce.ibmcloud.com/vulnerabilities/21726