CVE-2005-3123

Published: Oct 30, 2005Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted sequences such as "/.//..//////././", which is collapsed into "/.././" after ".." and "//" sequences are removed.

Affected (6)

Products: Gnu: Gnump3d

Gnu

1 product

Gnump3d

Configuration A

6 vulnerable

Vulnerable Software	Affected Versions
Gnu Gnump3d	Version 2.9.1
Gnu Gnump3d	Version 2.9.2
Gnu Gnump3d	Version 2.9.3
Gnu Gnump3d	Version 2.9.4
Gnu Gnump3d	Version 2.9.5
Gnu Gnump3d	Version 2.9

References (22)

http://lists.gnu.org/archive/html/gnump3d-users/2005-10/msg00013.html

Source: security@debian.org

Patch

http://secunia.com/advisories/17351

Source: security@debian.org

ExploitPatchVendor Advisory

http://secunia.com/advisories/17559

Source: security@debian.org

Vendor Advisory

http://securityreason.com/securityalert/127

Source: security@debian.org

http://securitytracker.com/id?1015118

Source: security@debian.org

http://www.debian.org/security/2005/dsa-877

Source: security@debian.org

PatchVendor Advisory

http://www.novell.com/linux/security/advisories/2005_27_sr.html

Source: security@debian.org

http://www.novell.com/linux/security/advisories/2005_28_sr.html

Source: security@debian.org

http://www.osvdb.org/20360

Source: security@debian.org

http://www.securityfocus.com/bid/15228

Source: security@debian.org

Patch

http://www.vupen.com/english/advisories/2005/2242

Source: security@debian.org

http://lists.gnu.org/archive/html/gnump3d-users/2005-10/msg00013.html