5

CVE-2012-1841

Absolute path traversal vulnerability in logShow.htm on the Quantum Scalar i500 tape library with firmware before i7.0.3 (604G.GS00100), also distributed as the Dell ML6000 tape library with firmware before A20-00 (590G.GS00100), allows remote attackers to read arbitrary files via a full pathname in the file parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Quantum ≫ Scalar I500 Firmware Version <= i7.0.2
Quantum ≫ Scalar I500 Firmware Version i2
Quantum ≫ Scalar I500 Firmware Version i3
Quantum ≫ Scalar I500 Firmware Version i3.1
Quantum ≫ Scalar I500 Firmware Version i4
Quantum ≫ Scalar I500 Firmware Version i5
Quantum ≫ Scalar I500 Firmware Version i5.1
Quantum ≫ Scalar I500 Firmware Version i6
Quantum ≫ Scalar I500 Firmware Version i6.1
Quantum ≫ Scalar I500 Firmware Version i7
Quantum ≫ Scalar I500 Firmware Version i7.0.1
Quantum ≫ Scalar I500 Firmware Version sp4
Quantum ≫ Scalar I500 Firmware Version sp4.2
Quantum ≫ Scalar I500 Version 5u
Quantum ≫ Scalar I500 Version 14u
Quantum ≫ Scalar I500 Version 23u
Dell ≫ Powervault Ml6000 Firmware Version 585g.gs003
Dell ≫ Powervault Ml6000 Version 32u
Dell ≫ Powervault Ml6000 Version 41u
Dell ≫ Powervault Ml6010 Version 5u
Dell ≫ Powervault Ml6020 Version 14u
Dell ≫ Powervault Ml6030 Version 23u
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 2.12% 0.799
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:P/I:N/A:N
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

http://osvdb.org/80226
http://secunia.com/advisories/48403
http://secunia.com/advisories/48453
http://www.kb.cert.org/vuls/id/913483
US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-8NNKN8
US Government Resource
http://www.kb.cert.org/vuls/id/MAPG-8NVRPY
US Government Resource