CVEvulnerability
CVE-2005-3040
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2005-09-22
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
Directory traversal vulnerability in the web interface (ISALogin.dll) for TAC Vista 4.0, and possibly other versions before 4.3, allows remote attackers to read arbitrary files via ".." sequences in the Template parameter.
Affected configurations
• tac vista 3.0
• tac vista 4.0
References
- http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0469.html archives.neohapsis.com
- http://secunia.com/advisories/16854 Vendor Advisory
- http://securitytracker.com/id?1014923 Exploit, Vendor Advisory
- http://www.cirt.dk/advisories/cirt-37-advisory.pdf Exploit, Vendor Advisory
- http://www.osvdb.org/19479 Exploit
- http://archives.neohapsis.com/archives/fulldisclosure/2005-09/0469.html archives.neohapsis.com
- http://secunia.com/advisories/16854 Vendor Advisory
- http://securitytracker.com/id?1014923 Exploit, Vendor Advisory
- http://www.cirt.dk/advisories/cirt-37-advisory.pdf Exploit, Vendor Advisory
- http://www.osvdb.org/19479 Exploit