CVE-2011-2474

Directory traversal vulnerability in the HTTP Server in Sybase EAServer 6.3.1 Developer Edition allows remote attackers to read arbitrary files via a /.\../\../\ sequence in a path.

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

63.61% chance of exploitation in the next 30 days, 99th percentile

Published

2011-06-09

Updated

2024-09-16

Metasploit modules (1)

• rapid7/metasploit-framework/blob/master/modules/auxiliary/scanner/http/sybase_easerver_tr…

References

• CVE Record
• NVD entry

Related

• CVE-2011-2472
• CVE-2011-2505
• CVE-2011-2471
• CVE-2011-2506
• CVE-2011-2462
• CVE-2011-2507