Search
Get a Demo

published date: December 31, 2004

CVE-2004-1444 : Directory Traversal Vulnerability

Description

Directory traversal vulnerability in Roundup 0.6.4 and earlier allows remote attackers to view arbitrary files via .. (dot dot) sequences in an @@ command in an HTTP GET request.

Product(s):

  • Roundup-Tracker Roundup
  • Roundup-Tracker Roundup 0.1.0
  • Roundup-Tracker Roundup 0.1.1
  • Roundup-Tracker Roundup 0.1.2
  • Roundup-Tracker Roundup 0.1.3
  • CVSS:5 [Critical]
  • EPSS:16.54%
  • Exploitability:10
  • In KEV:No

Question to Ask Vendors:

  1. Can you confirm whether your systems are affected by CVE-2004-1444, and if so, what steps are you currently taking to mitigate this vulnerability?
  2. What is your estimated timeline for fully resolving CVE-2004-1444 in your products or services, and how will you communicate updates on this issue to us as your customer?

READY TO GET RESULTS YOU CAN TRUST?

Get a Demo Contact Sales