CVE-2011-4711

Published: Dec 8, 2011Modified: Apr 29, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

Multiple directory traversal vulnerabilities in namazu.cgi in Namazu before 2.0.16 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) lang or (2) result parameter.

Affected (148)

Products: Namazu: Namazu

Namazu

1 product

Namazu

Configuration A

148 vulnerable

Vulnerable Software	Affected Versions
Namazu Namazu	Up to 2.0.16
Namazu Namazu	Version 0.1.0
Namazu Namazu	Version 0.1.1
Namazu Namazu	Version 0.1.2
Namazu Namazu	Version 0.1.3
Namazu Namazu	Version 0.1.4
Namazu Namazu	Version 0.2.0
Namazu Namazu	Version 0.2.1
Namazu Namazu	Version 0.2.2
Namazu Namazu	Version 0.3.0
Namazu Namazu	Version 0.3.1
Namazu Namazu	Version 0.3.2
Namazu Namazu	Version 0.3.3
Namazu Namazu	Version 1.0.0
Namazu Namazu	Version 1.0.1
Namazu Namazu	Version 1.0.2
Namazu Namazu	Version 1.0.3
Namazu Namazu	Version 1.0.4
Namazu Namazu	Version 1.0.4a
Namazu Namazu	Version 1.0.4b
Namazu Namazu	Version 1.1.0
Namazu Namazu	Version 1.1.0a
Namazu Namazu	Version 1.1.1.1
Namazu Namazu	Version 1.1.1.2
Namazu Namazu	Version 1.1.1.3
Namazu Namazu	Version 1.1.1.4
Namazu Namazu	Version 1.1.1.5
Namazu Namazu	Version 1.1.1
Namazu Namazu	Version 1.1.2.1
Namazu Namazu	Version 1.1.2.2
Namazu Namazu	Version 1.1.2.3
Namazu Namazu	Version 1.1.2.4
Namazu Namazu	Version 1.1.2.5
Namazu Namazu	Version 1.1.2
Namazu Namazu	Version 1.2.0.1
Namazu Namazu	Version 1.2.0.2
Namazu Namazu	Version 1.2.0.3
Namazu Namazu	Version 1.2.0.4
Namazu Namazu	Version 1.2.0.5 beta2
Namazu Namazu	Version 1.2.0
Namazu Namazu	Version 1.2.1.0 beta10
Namazu Namazu	Version 1.2.1.0 beta11
Namazu Namazu	Version 1.2.1.0 beta12
Namazu Namazu	Version 1.2.1.0 beta13
Namazu Namazu	Version 1.2.1.0 beta5
Namazu Namazu	Version 1.2.1.0 beta6
Namazu Namazu	Version 1.2.1.0 beta7
Namazu Namazu	Version 1.2.1.0 beta8
Namazu Namazu	Version 1.2.1.0 beta9
Namazu Namazu	Version 1.3.0.0
Namazu Namazu	Version 1.3.0.0 beta10
Namazu Namazu	Version 1.3.0.0 beta11
Namazu Namazu	Version 1.3.0.0 beta12
Namazu Namazu	Version 1.3.0.0 beta13
Namazu Namazu	Version 1.3.0.0 beta1
Namazu Namazu	Version 1.3.0.0 beta2
Namazu Namazu	Version 1.3.0.0 beta3
Namazu Namazu	Version 1.3.0.0 beta4
Namazu Namazu	Version 1.3.0.0 beta5
Namazu Namazu	Version 1.3.0.0 beta6
Namazu Namazu	Version 1.3.0.0 beta7
Namazu Namazu	Version 1.3.0.0 beta8
Namazu Namazu	Version 1.3.0.0 beta9
Namazu Namazu	Version 1.3.0.1
Namazu Namazu	Version 1.3.0.1 beta1
Namazu Namazu	Version 1.3.0.2
Namazu Namazu	Version 1.3.1.0 alpha10
Namazu Namazu	Version 1.3.1.0 alpha11
Namazu Namazu	Version 1.3.1.0 alpha1
Namazu Namazu	Version 1.3.1.0 alpha2
Namazu Namazu	Version 1.3.1.0 alpha3
Namazu Namazu	Version 1.3.1.0 alpha4
Namazu Namazu	Version 1.3.1.0 alpha5
Namazu Namazu	Version 1.3.1.0 alpha6
Namazu Namazu	Version 1.3.1.0 alpha7
Namazu Namazu	Version 1.3.1.0 alpha8
Namazu Namazu	Version 1.3.1.0 alpha9
Namazu Namazu	Version 1.4.0.0 alpha1
Namazu Namazu	Version 1.4.0.0 alpha2
Namazu Namazu	Version 1.4.0.0 alpha3
Namazu Namazu	Version 1.4.0.0 alpha4
Namazu Namazu	Version 1.4.0.0 alpha5
Namazu Namazu	Version 1.4.0.0 alpha6
Namazu Namazu	Version 1.4.0.0 alpha7
Namazu Namazu	Version 1.4.0.0 beta1
Namazu Namazu	Version 1.4.0.0 beta2
Namazu Namazu	Version 1.4.0.0 beta3
Namazu Namazu	Version 1.4.0.0 beta4
Namazu Namazu	Version 1.4.0.0 beta5
Namazu Namazu	Version 1.4.0.0 beta6
Namazu Namazu	Version 1.4.0.0 beta7
Namazu Namazu	Version 1.4.0.0 beta8
Namazu Namazu	Version 2.0.10
Namazu Namazu	Version 2.0.10 rc1
Namazu Namazu	Version 2.0.10 rc2
Namazu Namazu	Version 2.0.11
Namazu Namazu	Version 2.0.11 pre1
Namazu Namazu	Version 2.0.11 pre2
Namazu Namazu	Version 2.0.11 pre3
Namazu Namazu	Version 2.0.11 pre4
Namazu Namazu	Version 2.0.12
Namazu Namazu	Version 2.0.13
Namazu Namazu	Version 2.0.13 pre3
Namazu Namazu	Version 2.0.13 pre4
Namazu Namazu	Version 2.0.13 pre5
Namazu Namazu	Version 2.0.13 pre6
Namazu Namazu	Version 2.0.13 pre7
Namazu Namazu	Version 2.0.13 pre8
Namazu Namazu	Version 2.0.13 rc1
Namazu Namazu	Version 2.0.13 rc2
Namazu Namazu	Version 2.0.13 rc3
Namazu Namazu	Version 2.0.13 rc4
Namazu Namazu	Version 2.0.15
Namazu Namazu	Version 2.0.15 pre1
Namazu Namazu	Version 2.0.15 pre2
Namazu Namazu	Version 2.0.15 pre3
Namazu Namazu	Version 2.0.15 pre4
Namazu Namazu	Version 2.0.15 rc1
Namazu Namazu	Version 2.0.15 rc2
Namazu Namazu	Version 2.0.15 rc3
Namazu Namazu	Version 2.0.15 rc4
Namazu Namazu	Version 2.0.15 rc5
Namazu Namazu	Version 2.0.16 rc2
Namazu Namazu	Version 2.0.1
Namazu Namazu	Version 2.0.2
Namazu Namazu	Version 2.0.3
Namazu Namazu	Version 2.0.4
Namazu Namazu	Version 2.0.5
Namazu Namazu	Version 2.0.6
Namazu Namazu	Version 2.0.6 pre1
Namazu Namazu	Version 2.0.6 pre2
Namazu Namazu	Version 2.0.6 pre3
Namazu Namazu	Version 2.0.6 rc1
Namazu Namazu	Version 2.0.6 rc2
Namazu Namazu	Version 2.0.6 rc3
Namazu Namazu	Version 2.0.6 rc4
Namazu Namazu	Version 2.0.6 rc5
Namazu Namazu	Version 2.0.6 rc6
Namazu Namazu	Version 2.0.6 rc7
Namazu Namazu	Version 2.0.7
Namazu Namazu	Version 2.0.7 pre1
Namazu Namazu	Version 2.0.7 pre2
Namazu Namazu	Version 2.0.7 pre3
Namazu Namazu	Version 2.0.8
Namazu Namazu	Version 2.0.8 pre1
Namazu Namazu	Version 2.0.9
Namazu Namazu	Version 2.0.9 rc1
Namazu Namazu	Version 2.0

Related CWEs

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

References (4)

http://www.namazu.org/security.html#

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/71489

Source: cve@mitre.org

http://www.namazu.org/security.html#

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/71489

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.