← Back

CVE-2006-4140

nvd nist
Published: Aug 14, 2006Modified: Apr 16, 2026

JSON object

Loading...
5.0
Vector
AV:N/AC:L/Au:N/C:P/I:N/A:N
Exploitability: 10.0 / Impact: 2.9
Source: NVD

Description

Directory traversal vulnerability in IPCheck Server Monitor before 5.3.3.639/640 allows remote attackers to read arbitrary files via modified .. (dot dot) sequences in the URL, including (1) "..%2f" (encoded "/" slash), "..../" (multiple dot), and "..%255c../" (double-encoded "\" backslash).

Affected (35)

1 product
Server Monitor
Configuration A
35 vulnerable
Vulnerable SoftwareAffected Versions
Ipcheck
Version 4.3.1.368
Version 4.3.1.382
Version 4.4.1.521
Version 4.4.1.522
Version 5.0.1.272
Version 5.0.1.299
Version 5.0.1.309
Version 5.0.1.321
Version 5.1.0.341
Version 5.1.0.342
Version 5.1.0.345
Version 5.2.0.404
Version 5.2.0.405
Version 5.2.0.418
Version 5.2.0.420
Version 5.2.2.449
Version 5.2.2.451
Version 5.3.0.506
Version 5.3.0.507
Version 5.3.0.508
Version 5.3.0.509
Version 5.3.1.574
Version 5.3.1.575
Version 5.3.1.578
Version 5.3.1.579
Version 5.3.1.580
Version 5.3.1.581
Version 5.3.1.586
Version 5.3.1.587
Version 5.3.2.605
Version 5.3.2.606
Version 5.3.2.609
Version 5.3.2.610
Version 5.3.2.616
Version 5.3.2.617

References (20)

Source: cve@mitre.org
ExploitVendor Advisory
Source: cve@mitre.org
Exploit
Source: cve@mitre.org
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Exploit
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.