CVE-2015-4068
Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerability
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
YesDecision
Descriptions
Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via a crafted file path to the (1) reportFileServlet or (2) exportServlet servlet.
Vulnerabilidad de salto de directorio en Arcserve UDP anterior a 5.0 Update 4 permite a atacantes remotos obtener información sensible o causar una denegación de servicio a través de una ruta de fichero manipulada en el servlet (1) reportFileServlet o (2) exportServlet.
This vulnerability allows remote attackers to disclose and delete files on vulnerable installations of Arcserve Unified Data Protection. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the exportServlet servlet. The issue lies in the failure to sanitize the path of files requested. An attacker could use this to create an information disclosure and denial-of-service condition under the context of the SYSTEM user.
Directory traversal vulnerability in Arcserve UDP allows remote attackers to obtain sensitive information or cause a denial of service.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2015-05-22 CVE Reserved
- 2015-05-26 CVE Published
- 2022-03-25 Exploited in Wild
- 2022-04-15 KEV Due Date
- 2024-08-06 CVE Updated
- 2024-10-02 EPSS Updated
- ---------- First Exploit
CWE
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CAPEC
References (4)
| URL | Tag | Source |
|---|---|---|
| http://www.securityfocus.com/bid/74845 | Vdb Entry | |
| http://www.zerodayinitiative.com/advisories/ZDI-15-241 | X_refsource_misc |
|
| http://www.zerodayinitiative.com/advisories/ZDI-15-242 | X_refsource_misc |
|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Arcserve Search vendor "Arcserve" | Arcserve Unified Data Protection Search vendor "Arcserve" for product "Arcserve Unified Data Protection" | <= 5.0 Search vendor "Arcserve" for product "Arcserve Unified Data Protection" and version " <= 5.0" | 3 |
Affected
| ||||||