CVE-2009-4952: Path Traversal
Published Jul 22, 2010
·Updated
Directory traversal vulnerability in the Directory Listing (dirlisting) extension 1.1.0 and earlier for TYPO3 allows remote attackers to have an unspecified impact via unknown vectors.
Affected Software
2 affected components
Serge Gebhardt Dir Listing<=1.1.0
Typo3 TYPO3
Event History
Jul 22, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Data Sourced
06:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2009-4952?
CVE-2009-4952 is classified as a moderate severity vulnerability due to potential unauthorized directory access.
2
How do I fix CVE-2009-4952?
To fix CVE-2009-4952, update the Directory Listing extension to a version later than 1.1.0.
3
What impact does CVE-2009-4952 have on TYPO3 installations?
CVE-2009-4952 allows remote attackers to exploit directory traversal paths, potentially exposing sensitive information.
4
Is TYPO3 itself affected by CVE-2009-4952?
TYPO3 itself is not inherently vulnerable; the issue is specific to the Directory Listing extension version 1.1.0 and earlier.
5
What versions of the Directory Listing extension are vulnerable to CVE-2009-4952?
Versions of the Directory Listing extension up to and including 1.1.0 are vulnerable to CVE-2009-4952.