CVE-2006-3885
Severity Score
5.0
*CVSS v2
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
Directory traversal vulnerability in Check Point Firewall-1 R55W before HFA03 allows remote attackers to read arbitrary files via an encoded .. (dot dot) in the URL on TCP port 18264.
Vulnerabilidad de salto de directorio en Check Point Firewall-1 R55W anterior a HFA03 permite a atacantes remotos leer archivos de su elección mediante un .. (punto punto) codificado en el URL en el puerto TCP 18264.
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2006-07-26 CVE Reserved
- 2006-07-27 CVE Published
- 2024-04-01 EPSS Updated
- 2024-08-07 CVE Updated
- 2024-08-07 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
CAPEC
References (9)
| URL | Tag | Source |
|---|---|---|
| http://secunia.com/advisories/21200 | Third Party Advisory | |
| http://securityreason.com/securityalert/1290 | Third Party Advisory | |
| http://securitytracker.com/id?1016563 | Vdb Entry | |
| http://www.sec-tec.co.uk/vulnerability/r55w_directory_traversal.html | X_refsource_misc | |
| http://www.securityfocus.com/archive/1/440990/100/0/threaded | Mailing List | |
| http://www.securityfocus.com/archive/1/441495/100/0/threaded | Mailing List | |
| http://www.vupen.com/english/advisories/2006/2965 | Vdb Entry | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/27937 | Vdb Entry |
| URL | Date | SRC |
|---|---|---|
| http://www.securityfocus.com/bid/19136 | 2024-08-07 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Checkpoint Search vendor "Checkpoint" | Firewall-1 Search vendor "Checkpoint" for product "Firewall-1" | r55w Search vendor "Checkpoint" for product "Firewall-1" and version "r55w" | - |
Affected
| ||||||
| Checkpoint Search vendor "Checkpoint" | Firewall-1 Search vendor "Checkpoint" for product "Firewall-1" | r55w Search vendor "Checkpoint" for product "Firewall-1" and version "r55w" | hfa1 |
Affected
| ||||||
| Checkpoint Search vendor "Checkpoint" | Firewall-1 Search vendor "Checkpoint" for product "Firewall-1" | r55w Search vendor "Checkpoint" for product "Firewall-1" and version "r55w" | hfa2 |
Affected
| ||||||