Vulnerability Details CVE-2005-3490
Directory traversal vulnerability in the web server in Asus Video Security 3.5.0.0 and earlier allows remote attackers to read arbitrary files via "../" or "..\" sequences in the URL.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.005
EPSS Ranking 65.7%
CVSS Severity
CVSS v2 Score 5.0
References
- http://aluigi.altervista.org/adv/asusvsbugs-adv.txt
- http://marc.info/?l=full-disclosure&m=113096055302614&w=2
- http://secunia.com/advisories/17419
- http://www.securityfocus.com/bid/15281
- http://aluigi.altervista.org/adv/asusvsbugs-adv.txt
- http://marc.info/?l=full-disclosure&m=113096055302614&w=2
- http://secunia.com/advisories/17419
- http://www.securityfocus.com/bid/15281
Products affected by CVE-2005-3490
-
cpe:2.3:a:asus:video_security_online:-