CVE-2006-5596

Published: Oct 28, 2006Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Directory traversal vulnerability in the SSL server in AEP Smartgate 4.3b allows remote attackers to download arbitrary files via ..\ (dot dot backslash) sequences in an HTTP GET request.

Affected (1)

Products: Aep Networks: Smartgate Ssl Server

Aep Networks

1 product

Smartgate Ssl Server

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Aep Networks Smartgate Ssl Server	Version 4.3b

References (12)

http://secunia.com/advisories/22550

Source: cve@mitre.org

Vendor Advisory

http://www.securityfocus.com/bid/20722

Source: cve@mitre.org

Exploit

http://www.vupen.com/english/advisories/2006/4224

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/29817

Source: cve@mitre.org

https://prdelka.blackart.org.uk/exploitz/prdelka-vs-AEP-smartgate.c

Source: cve@mitre.org

Exploit

https://www.exploit-db.com/exploits/2637

Source: cve@mitre.org

http://secunia.com/advisories/22550