CVE-2005-3040

Directory traversal vulnerability in the web interface (ISALogin.dll) for TAC Vista 4.0, and possibly other versions before 4.3, allows remote attackers to read arbitrary files via ".." sequences in the Template parameter.

CVSS Metrics

Affected Products (2)

GitHub Security Advisory GHSA-6hgv-gw79-9vq8

Directory traversal vulnerability in the web interface (ISALogin.dll) for TAC Vista 4.0, and...

References (10)

• http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0469.html
• http://secunia.com/advisories/16854 Vendor Advisory
• http://securitytracker.com/id?1014923 Exploit, Vendor Advisory
• http://www.cirt.dk/advisories/cirt-37-advisory.pdf Exploit, Vendor Advisory
• http://www.osvdb.org/19479 Exploit
• http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0469.html
• http://secunia.com/advisories/16854 Vendor Advisory
• http://securitytracker.com/id?1014923 Exploit, Vendor Advisory
• http://www.cirt.dk/advisories/cirt-37-advisory.pdf Exploit, Vendor Advisory
• http://www.osvdb.org/19479 Exploit