CVEvulnerability
CVE-2010-0620
9.3 HIGH
Official page ↗
- Status
- Modified
- Published
- 2010-02-25
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 9.3 HIGH — AV:N/AC:M/Au:N/C:C/I:C/A:C
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2 allows remote attackers to overwrite arbitrary files with any content, and consequently execute arbitrary code, via a .. (dot dot) in an unspecified parameter.
Affected configurations
• emc homebase server 6.2
• emc homebase server 6.3
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://securityreason.com/securityalert/8230 securityreason.com
- http://www.securityfocus.com/archive/1/509723/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/38380 Exploit
- http://www.vupen.com/english/advisories/2010/0458 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-10-020/ www.zerodayinitiative.com
- http://securityreason.com/securityalert/8230 securityreason.com
- http://www.securityfocus.com/archive/1/509723/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/38380 Exploit
- http://www.vupen.com/english/advisories/2010/0458 Vendor Advisory
- http://www.zerodayinitiative.com/advisories/ZDI-10-020/ www.zerodayinitiative.com