CVE-2010-4181: Path Traversal
Published Nov 4, 2010
·Updated
Directory traversal vulnerability in Yaws 1.89 allows remote attackers to read arbitrary files via ..\ (dot dot backslash) and other sequences.
Affected Software
1 affected component
Yaws yaws=1.89
Event History
Nov 4, 2010
CVE Published
via MITRE·06:00 PM
Data Sourced
via MITRE·06:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2010-4181?
CVE-2010-4181 is considered to be of medium severity due to its potential to expose sensitive files.
2
How do I fix CVE-2010-4181?
To fix CVE-2010-4181, upgrade Yaws to a version later than 1.89, where the vulnerability has been patched.
3
What types of attacks can CVE-2010-4181 enable?
CVE-2010-4181 can enable directory traversal attacks, allowing unauthorized access to arbitrary files on the server.
4
Which versions of Yaws are affected by CVE-2010-4181?
CVE-2010-4181 affects Yaws version 1.89 specifically.
5
Is CVE-2010-4181 remotely exploitable?
Yes, CVE-2010-4181 is remotely exploitable as it allows attackers to read files from a remote location.