CVE-2014-9609: Path Traversal
Directory traversal vulnerability in webadmin/reporter/viewserverlog.php in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 allows remote attackers to list directory contents via a .. (dot dot) in the log parameter in a stats action.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2014-9609.
What is the severity of CVE-2014-9609?
CVE-2014-9609 has a severity of 5.3, which is classified as medium.
How does the vulnerability CVE-2014-9609 impact Netsweeper?
CVE-2014-9609 allows remote attackers to list directory contents in Netsweeper before 3.1.10, 4.0.x before 4.0.9, and 4.1.x before 4.1.2 via a directory traversal attack on the log parameter in a stats action in webadmin/reporter/view_server_log.php.
How can I exploit CVE-2014-9609?
We do not provide information or support on how to exploit vulnerabilities.
How can I mitigate the vulnerability CVE-2014-9609?
To mitigate CVE-2014-9609, it is recommended to apply the latest security patch provided by Netsweeper.