CVE-2006-5725
AEP Smartgate SSL Server 4.3b - Directory Existence Disclosure via HTTP Status Code
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2006-5725. PoCs published by prdelka.
AI-analyzed exploit summary This exploit leverages a directory traversal vulnerability in AEP Smartgate's SSL server to download arbitrary files. It constructs a malicious HTTP GET request with traversal sequences to access files outside the web root.
Description
The SSL server in AEP Smartgate 4.3b allows remote attackers to determine existence of directories via a direct request for a directory URI, which returns different HTTP status codes for existing and non-existing directories.
Exploits (1)
This exploit leverages a directory traversal vulnerability in AEP Smartgate's SSL server to download arbitrary files. It constructs a malicious HTTP GET request with traversal sequences to access files outside the web root.