CVE-2006-5596

Directory traversal vulnerability in the SSL server in AEP Smartgate 4.3b allows remote attackers to download arbitrary files via ..\ (dot dot backslash) sequences in an HTTP GET request.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

2.98% chance of exploitation in the next 30 days, 86th percentile

Published

2006-10-28

Updated

2024-08-07

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/2637

References

• CVE Record
• NVD entry

Related

• CVE-2006-5590
• CVE-2006-5597
• CVE-2006-5588
• CVE-2006-5603
• CVE-2006-5587
• CVE-2006-5609