CVE-2006-5596

AEP Networks Smartgate SSL Server - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in the SSL server in AEP Smartgate 4.3b allows remote attackers to download arbitrary files via ..\ (dot dot backslash) sequences in an HTTP GET request.

Exploits (1)

exploitdb WORKING POC VERIFIED

by prdelka · cremotewindows

https://www.exploit-db.com/exploits/2637

View Code ZIP pw:eip

References (6)

[Vendor Advisory] http://secunia.com/advisories/22550

[Third Party Advisory] http://www.vupen.com/english/advisories/2006/4224

[Third Party Advisory, VDB Entry] https://exchange.xforce.ibmcloud.com/vulnerabilities/29817

[Exploit, Third Party Advisory] https://www.exploit-db.com/exploits/2637

[Exploit] http://www.securityfocus.com/bid/20722

[Exploit] https://prdelka.blackart.org.uk/exploitz/prdelka-vs-AEP-smartgate.c

Scores

EPSS 0.1492

EPSS Percentile 94.6%

Details

Status published

Products (1)

aep_networks/smartgate_ssl_server 4.3b

Published Oct 28, 2006

Tracked Since Feb 18, 2026