CVE-2013-4510

N/A

Descricao

Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a report.

Detalhes CVE

Pontuacao CVSS v3.1N/A

Publicado11/18/2013

Ultima modificacao4/29/2026

Fontenvd

Avistamentos honeypot0

Produtos afetados

tryton:tryton

Fraquezas (CWE)

CWE-22

Referencias

http://hg.tryton.org/tryton/rev/357d0a4d9cb8(secalert@redhat.com)

http://www.debian.org/security/2013/dsa-2791(secalert@redhat.com)

http://www.openwall.com/lists/oss-security/2013/11/04/21(secalert@redhat.com)

http://www.tryton.org/posts/security-release-for-issue3446.html(secalert@redhat.com)

https://bugs.tryton.org/issue3446(secalert@redhat.com)

http://hg.tryton.org/tryton/rev/357d0a4d9cb8(af854a3a-2127-422b-91ae-364da2661108)

http://www.debian.org/security/2013/dsa-2791(af854a3a-2127-422b-91ae-364da2661108)

http://www.openwall.com/lists/oss-security/2013/11/04/21(af854a3a-2127-422b-91ae-364da2661108)

http://www.tryton.org/posts/security-release-for-issue3446.html(af854a3a-2127-422b-91ae-364da2661108)

https://bugs.tryton.org/issue3446(af854a3a-2127-422b-91ae-364da2661108)

Correlacoes IOC

Sem correlacoes registradas

This product uses data from the NVD API but is not endorsed or certified by the NVD.