CVE

CVE-2004-2112

Date: (C)2004-12-31   (M)2023-12-22

Directory traversal vulnerability in BremsServer 1.2.4 allows remote attackers to read arbitrary files via ".." (dot dot) sequences in the URL.

CVSS Score and Metrics +CVSS Score and Metrics -

CVSS V2 Severity:
CVSS Score : 5.0
Exploit Score: 10.0
Impact Score: 2.9
CVSS V2 Metrics:
Access Vector: NETWORK
Access Complexity: LOW
Authentication: NONE
Confidentiality: PARTIAL
Integrity: NONE
Availability: NONE

Reference:

SECTRACK-1008853

SECUNIA-10731

http://marc.info/?l=bugtraq&m=107513747107031&w=2

OSVDB-3755

BID-9493

bremsserver-dotdot-directory-traversal(14954)