5

CVE-2011-4711

Multiple directory traversal vulnerabilities in namazu.cgi in Namazu before 2.0.16 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) lang or (2) result parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Namazu ≫ Namazu Update rc3 Version <= 2.0.16
Namazu ≫ Namazu Version 0.1.0
Namazu ≫ Namazu Version 0.1.1
Namazu ≫ Namazu Version 0.1.2
Namazu ≫ Namazu Version 0.1.3
Namazu ≫ Namazu Version 0.1.4
Namazu ≫ Namazu Version 0.2.0
Namazu ≫ Namazu Version 0.2.1
Namazu ≫ Namazu Version 0.2.2
Namazu ≫ Namazu Version 0.3.0
Namazu ≫ Namazu Version 0.3.1
Namazu ≫ Namazu Version 0.3.2
Namazu ≫ Namazu Version 0.3.3
Namazu ≫ Namazu Version 1.0.0
Namazu ≫ Namazu Version 1.0.1
Namazu ≫ Namazu Version 1.0.2
Namazu ≫ Namazu Version 1.0.3
Namazu ≫ Namazu Version 1.0.4
Namazu ≫ Namazu Version 1.0.4a
Namazu ≫ Namazu Version 1.0.4b
Namazu ≫ Namazu Version 1.1.0
Namazu ≫ Namazu Version 1.1.0a
Namazu ≫ Namazu Version 1.1.1
Namazu ≫ Namazu Version 1.1.1.1
Namazu ≫ Namazu Version 1.1.1.2
Namazu ≫ Namazu Version 1.1.1.3
Namazu ≫ Namazu Version 1.1.1.4
Namazu ≫ Namazu Version 1.1.1.5
Namazu ≫ Namazu Version 1.1.2
Namazu ≫ Namazu Version 1.1.2.1
Namazu ≫ Namazu Version 1.1.2.2
Namazu ≫ Namazu Version 1.1.2.3
Namazu ≫ Namazu Version 1.1.2.4
Namazu ≫ Namazu Version 1.1.2.5
Namazu ≫ Namazu Version 1.2.0
Namazu ≫ Namazu Version 1.2.0.1
Namazu ≫ Namazu Version 1.2.0.2
Namazu ≫ Namazu Version 1.2.0.3
Namazu ≫ Namazu Version 1.2.0.4
Namazu ≫ Namazu Version 1.2.0.5 Update beta2
Namazu ≫ Namazu Version 1.2.1.0 Update beta10
Namazu ≫ Namazu Version 1.2.1.0 Update beta11
Namazu ≫ Namazu Version 1.2.1.0 Update beta12
Namazu ≫ Namazu Version 1.2.1.0 Update beta13
Namazu ≫ Namazu Version 1.2.1.0 Update beta5
Namazu ≫ Namazu Version 1.2.1.0 Update beta6
Namazu ≫ Namazu Version 1.2.1.0 Update beta7
Namazu ≫ Namazu Version 1.2.1.0 Update beta8
Namazu ≫ Namazu Version 1.2.1.0 Update beta9
Namazu ≫ Namazu Version 1.3.0.0
Namazu ≫ Namazu Version 1.3.0.0 Update beta1
Namazu ≫ Namazu Version 1.3.0.0 Update beta10
Namazu ≫ Namazu Version 1.3.0.0 Update beta11
Namazu ≫ Namazu Version 1.3.0.0 Update beta12
Namazu ≫ Namazu Version 1.3.0.0 Update beta13
Namazu ≫ Namazu Version 1.3.0.0 Update beta2
Namazu ≫ Namazu Version 1.3.0.0 Update beta3
Namazu ≫ Namazu Version 1.3.0.0 Update beta4
Namazu ≫ Namazu Version 1.3.0.0 Update beta5
Namazu ≫ Namazu Version 1.3.0.0 Update beta6
Namazu ≫ Namazu Version 1.3.0.0 Update beta7
Namazu ≫ Namazu Version 1.3.0.0 Update beta8
Namazu ≫ Namazu Version 1.3.0.0 Update beta9
Namazu ≫ Namazu Version 1.3.0.1
Namazu ≫ Namazu Version 1.3.0.1 Update beta1
Namazu ≫ Namazu Version 1.3.0.2
Namazu ≫ Namazu Version 1.3.1.0 Update alpha1
Namazu ≫ Namazu Version 1.3.1.0 Update alpha10
Namazu ≫ Namazu Version 1.3.1.0 Update alpha11
Namazu ≫ Namazu Version 1.3.1.0 Update alpha2
Namazu ≫ Namazu Version 1.3.1.0 Update alpha3
Namazu ≫ Namazu Version 1.3.1.0 Update alpha4
Namazu ≫ Namazu Version 1.3.1.0 Update alpha5
Namazu ≫ Namazu Version 1.3.1.0 Update alpha6
Namazu ≫ Namazu Version 1.3.1.0 Update alpha7
Namazu ≫ Namazu Version 1.3.1.0 Update alpha8
Namazu ≫ Namazu Version 1.3.1.0 Update alpha9
Namazu ≫ Namazu Version 1.4.0.0 Update alpha1
Namazu ≫ Namazu Version 1.4.0.0 Update alpha2
Namazu ≫ Namazu Version 1.4.0.0 Update alpha3
Namazu ≫ Namazu Version 1.4.0.0 Update alpha4
Namazu ≫ Namazu Version 1.4.0.0 Update alpha5
Namazu ≫ Namazu Version 1.4.0.0 Update alpha6
Namazu ≫ Namazu Version 1.4.0.0 Update alpha7
Namazu ≫ Namazu Version 1.4.0.0 Update beta1
Namazu ≫ Namazu Version 1.4.0.0 Update beta2
Namazu ≫ Namazu Version 1.4.0.0 Update beta3
Namazu ≫ Namazu Version 1.4.0.0 Update beta4
Namazu ≫ Namazu Version 1.4.0.0 Update beta5
Namazu ≫ Namazu Version 1.4.0.0 Update beta6
Namazu ≫ Namazu Version 1.4.0.0 Update beta7
Namazu ≫ Namazu Version 1.4.0.0 Update beta8
Namazu ≫ Namazu Version 2.0
Namazu ≫ Namazu Version 2.0.1
Namazu ≫ Namazu Version 2.0.2
Namazu ≫ Namazu Version 2.0.3
Namazu ≫ Namazu Version 2.0.4
Namazu ≫ Namazu Version 2.0.5
Namazu ≫ Namazu Version 2.0.6
Namazu ≫ Namazu Version 2.0.6 Update pre1
Namazu ≫ Namazu Version 2.0.6 Update pre2
Namazu ≫ Namazu Version 2.0.6 Update pre3
Namazu ≫ Namazu Version 2.0.6 Update rc1
Namazu ≫ Namazu Version 2.0.6 Update rc2
Namazu ≫ Namazu Version 2.0.6 Update rc3
Namazu ≫ Namazu Version 2.0.6 Update rc4
Namazu ≫ Namazu Version 2.0.6 Update rc5
Namazu ≫ Namazu Version 2.0.6 Update rc6
Namazu ≫ Namazu Version 2.0.6 Update rc7
Namazu ≫ Namazu Version 2.0.7
Namazu ≫ Namazu Version 2.0.7 Update pre1
Namazu ≫ Namazu Version 2.0.7 Update pre2
Namazu ≫ Namazu Version 2.0.7 Update pre3
Namazu ≫ Namazu Version 2.0.8
Namazu ≫ Namazu Version 2.0.8 Update pre1
Namazu ≫ Namazu Version 2.0.9
Namazu ≫ Namazu Version 2.0.9 Update rc1
Namazu ≫ Namazu Version 2.0.10
Namazu ≫ Namazu Version 2.0.10 Update rc1
Namazu ≫ Namazu Version 2.0.10 Update rc2
Namazu ≫ Namazu Version 2.0.11
Namazu ≫ Namazu Version 2.0.11 Update pre1
Namazu ≫ Namazu Version 2.0.11 Update pre2
Namazu ≫ Namazu Version 2.0.11 Update pre3
Namazu ≫ Namazu Version 2.0.11 Update pre4
Namazu ≫ Namazu Version 2.0.12
Namazu ≫ Namazu Version 2.0.13
Namazu ≫ Namazu Version 2.0.13 Update pre3
Namazu ≫ Namazu Version 2.0.13 Update pre4
Namazu ≫ Namazu Version 2.0.13 Update pre5
Namazu ≫ Namazu Version 2.0.13 Update pre6
Namazu ≫ Namazu Version 2.0.13 Update pre7
Namazu ≫ Namazu Version 2.0.13 Update pre8
Namazu ≫ Namazu Version 2.0.13 Update rc1
Namazu ≫ Namazu Version 2.0.13 Update rc2
Namazu ≫ Namazu Version 2.0.13 Update rc3
Namazu ≫ Namazu Version 2.0.13 Update rc4
Namazu ≫ Namazu Version 2.0.15
Namazu ≫ Namazu Version 2.0.15 Update pre1
Namazu ≫ Namazu Version 2.0.15 Update pre2
Namazu ≫ Namazu Version 2.0.15 Update pre3
Namazu ≫ Namazu Version 2.0.15 Update pre4
Namazu ≫ Namazu Version 2.0.15 Update rc1
Namazu ≫ Namazu Version 2.0.15 Update rc2
Namazu ≫ Namazu Version 2.0.15 Update rc3
Namazu ≫ Namazu Version 2.0.15 Update rc4
Namazu ≫ Namazu Version 2.0.15 Update rc5
Namazu ≫ Namazu Version 2.0.16 Update rc2
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.53% 0.72
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

http://www.namazu.org/security.html#
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/71489