CVE-2005-3490

Asus Video Security Online < 3.5.0.0 - Directory Traversal via URL Path Manipulation

Title source: llm
STIX 2.1

Description

Directory traversal vulnerability in the web server in Asus Video Security 3.5.0.0 and earlier allows remote attackers to read arbitrary files via "../" or "..\" sequences in the URL.

References (4)

Core 4
Core References
Vendor Advisory third-party-advisory x_refsource_secunia
http://secunia.com/advisories/17419
Third Party Advisory x_refsource_misc
http://aluigi.altervista.org/adv/asusvsbugs-adv.txt
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/15281
Mailing List mailing-list x_refsource_fulldisc
http://marc.info/?l=full-disclosure&m=113096055302614&w=2

Scores

EPSS 0.0052
EPSS Percentile 67.1%

Details

Status published
Products (1)
asus/video_security_online < 3.5.0.0
Published Nov 04, 2005
Tracked Since Feb 18, 2026