CVE-2009-4511

Published: Apr 13, 2010Modified: Apr 29, 2026

4.0

Vector

AV:N/AC:L/Au:S/C:P/I:N/A:N

Exploitability: 8.0 / Impact: 2.9

Source: NVD

Description

Multiple directory traversal vulnerabilities in the web administration interface on the TANDBERG Video Communication Server (VCS) before X5.1 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the page parameter to (1) helppage.php or (2) user/helppage.php.

Affected (11)

Products: Vsecurity: Tandberg Video Communication Server

Vsecurity

1 product

Tandberg Video Communication Server

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Vsecurity Tandberg Video Communication Server	Up to x4.3.0
Vsecurity Tandberg Video Communication Server	Version x1.0.0
Vsecurity Tandberg Video Communication Server	Version x1.1.0
Vsecurity Tandberg Video Communication Server	Version x1.2.0
Vsecurity Tandberg Video Communication Server	Version x2.0.0
Vsecurity Tandberg Video Communication Server	Version x2.1.0
Vsecurity Tandberg Video Communication Server	Version x3.0.0
Vsecurity Tandberg Video Communication Server	Version x3.1.0
Vsecurity Tandberg Video Communication Server	Version x4.1.0
Vsecurity Tandberg Video Communication Server	Version x4.2.0
Vsecurity Tandberg Video Communication Server	Version x4.2.1