CVE-2016-1505: Path Traversal

Q: Which deployments are exposed?

Radicale deployments using the filesystem storage backend on Windows are affected if they run a version before 1.1. The issue is remotely exploitable over the network.

Q: What does an attacker need to exploit this issue?

No privileges or user interaction are required. An attacker can send a crafted path such as /c:/file/ignore to cause arbitrary file reads or writes.

Q: What is the immediate remediation?

Apply the available patch by upgrading Radicale to version 1.1 or later. The affected condition is specifically documented for versions before 1.1 on Windows.

Published Feb 3, 2016

Updated

The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as demonstrated by /c:/file/ignore.

Affected Software

3 affected componentsFixes available

pip/Radicale<1.1

1.1

Radicale Radicale<=1.0.1

Microsoft Windows

Remediation

Patch Available

https://github.com/Kozea/Radicale/pull/343

Event History

Feb 3, 2016

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

May 17, 2022

Advisory Published

03:43 AM

Frequently Asked Questions

Which deployments are exposed?

Radicale deployments using the filesystem storage backend on Windows are affected if they run a version before 1.1. The issue is remotely exploitable over the network.

What does an attacker need to exploit this issue?

No privileges or user interaction are required. An attacker can send a crafted path such as /c:/file/ignore to cause arbitrary file reads or writes.

What is the immediate remediation?

Apply the available patch by upgrading Radicale to version 1.1 or later. The affected condition is specifically documented for versions before 1.1 on Windows.

CVE-2016-1505: Path Traversal

Affected Software

Remediation

Patch Available

Event History

Frequently Asked Questions

Which deployments are exposed?

What does an attacker need to exploit this issue?

What is the immediate remediation?

Company

Resources

Contact

Frequently Asked Questions

Which deployments are exposed?

What does an attacker need to exploit this issue?

What is the immediate remediation?