Vulnerability Details CVE-2009-4800
Directory traversal vulnerability in Sysax Multi Server 4.3 and 4.5 allows remote authenticated users to delete arbitrary files via a ..// (dot dot slash slash) in a DELE command.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.015
EPSS Ranking 80.0%
CVSS Severity
CVSS v2 Score 4.0
References
- http://osvdb.org/52959
- http://secunia.com/advisories/34433
- http://www.exploit-db.com/exploits/8256
- http://www.securityfocus.com/bid/34209
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49360
- http://osvdb.org/52959
- http://secunia.com/advisories/34433
- http://www.exploit-db.com/exploits/8256
- http://www.securityfocus.com/bid/34209
- https://exchange.xforce.ibmcloud.com/vulnerabilities/49360
Products affected by CVE-2009-4800
-
cpe:2.3:a:sysax:multi_server:4.3
-
cpe:2.3:a:sysax:multi_server:4.5