Vulnerability Details CVE-2005-3040
Directory traversal vulnerability in the web interface (ISALogin.dll) for TAC Vista 4.0, and possibly other versions before 4.3, allows remote attackers to read arbitrary files via ".." sequences in the Template parameter.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 72.1%
CVSS Severity
CVSS v2 Score 5.0
References
- http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0469.html
- http://secunia.com/advisories/16854
- http://securitytracker.com/id?1014923
- http://www.cirt.dk/advisories/cirt-37-advisory.pdf
- http://www.osvdb.org/19479
- http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0469.html
- http://secunia.com/advisories/16854
- http://securitytracker.com/id?1014923
- http://www.cirt.dk/advisories/cirt-37-advisory.pdf
- http://www.osvdb.org/19479