VulnerabilityModified
CVE-2005-1939
Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." (dot dot) sequences in a request to the Report service (TCP 8022).
MEDIUM 5.0EPSS 63.6%
Does this matter?
EPSS puts the probability of exploitation in the next 30 days at 63.6%, higher than 99% of all known CVEs. Patch or mitigate before the next change window.
Description
Directory traversal vulnerability in Ipswitch WhatsUp Small Business 2004 allows remote attackers to read arbitrary files via ".." (dot dot) sequences in a request to the Report service (TCP 8022).
- CVSS 2.0
- 5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N
- EPSS
- 63.59% probability · 99th percentile
- CISA KEV
- Not listed
- Affected
- ipswitch/whatsup small business
- Source
- cve@mitre.org
References
- http://cirt.dk/advisories/cirt-40-advisory.pdfExploit, Vendor Advisory
- http://secunia.com/advisories/15500Exploit, Vendor Advisory
- http://secunia.com/secunia_research/2005-14/advisory/Exploit, Vendor Advisory
- http://securitytracker.com/id?1015141Exploit
- http://www.securityfocus.com/bid/15291Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22969
- http://cirt.dk/advisories/cirt-40-advisory.pdfExploit, Vendor Advisory
- http://secunia.com/advisories/15500Exploit, Vendor Advisory
- http://secunia.com/secunia_research/2005-14/advisory/Exploit, Vendor Advisory
- http://securitytracker.com/id?1015141Exploit
- http://www.securityfocus.com/bid/15291Exploit
- https://exchange.xforce.ibmcloud.com/vulnerabilities/22969
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.