CVE-2005-2731: Low severity Astaro Security Linux vulnerability
Published Aug 29, 2005
·Updated
Directory traversal vulnerability in Astaro Security Linux 6.0, when using Webmin, allows remote authenticated webmin users to read arbitrary files via a .. (dot dot) in the wfedownload parameter to index.fpl.
Affected Software
1 affected component
Astaro Security Linux=6.001
Event History
Aug 29, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-2731?
CVE-2005-2731 is classified as a medium severity vulnerability due to its potential for unauthorized file access.
2
How do I fix CVE-2005-2731?
To fix CVE-2005-2731, update Astaro Security Linux to a version that addresses this directory traversal vulnerability.
3
What type of attack does CVE-2005-2731 enable?
CVE-2005-2731 enables an authenticated user to exploit a directory traversal flaw to read arbitrary files on the server.
4
Which versions of Astaro Security Linux are affected by CVE-2005-2731?
CVE-2005-2731 affects Astaro Security Linux version 6.001 when using the Webmin interface.
5
Is remote access required to exploit CVE-2005-2731?
Yes, an attacker must be an authenticated webmin user to exploit the CVE-2005-2731 vulnerability.