CVEvulnerability

CVE-2006-4140

5.0 MEDIUM Published 2006-08-14 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2006-08-14
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N

Description

Directory traversal vulnerability in IPCheck Server Monitor before 5.3.3.639/640 allows remote attackers to read arbitrary files via modified .. (dot dot) sequences in the URL, including (1) "..%2f" (encoded "/" slash), "..../" (multiple dot), and "..%255c../" (double-encoded "\" backslash).

Affected configurations

• ipcheck server monitor 4.3.1.368 • ipcheck server monitor 4.3.1.382 • ipcheck server monitor 4.4.1.521 • ipcheck server monitor 4.4.1.522 • ipcheck server monitor 5.0.1.272 • ipcheck server monitor 5.0.1.299 • ipcheck server monitor 5.0.1.309 • ipcheck server monitor 5.0.1.321 • ipcheck server monitor 5.1.0.341 • ipcheck server monitor 5.1.0.342 • ipcheck server monitor 5.1.0.345 • ipcheck server monitor 5.2.0.404 • ipcheck server monitor 5.2.0.405 • ipcheck server monitor 5.2.0.418 • ipcheck server monitor 5.2.0.420 • ipcheck server monitor 5.2.2.449 • ipcheck server monitor 5.2.2.451 • ipcheck server monitor 5.3.0.506 • ipcheck server monitor 5.3.0.507 • ipcheck server monitor 5.3.0.508 • ipcheck server monitor 5.3.0.509 • ipcheck server monitor 5.3.1.574 • ipcheck server monitor 5.3.1.575 • ipcheck server monitor 5.3.1.578 • ipcheck server monitor 5.3.1.579 • ipcheck server monitor 5.3.1.580 • ipcheck server monitor 5.3.1.581 • ipcheck server monitor 5.3.1.586 • ipcheck server monitor 5.3.1.587 • ipcheck server monitor 5.3.2.605 • ipcheck server monitor 5.3.2.606 • ipcheck server monitor 5.3.2.609 • ipcheck server monitor 5.3.2.610 • ipcheck server monitor 5.3.2.616 • ipcheck server monitor 5.3.2.617

References