CVEvulnerability

CVE-2011-4696

4.3 MEDIUM Published 2014-03-03 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2014-03-03
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
4.3 MEDIUM — AV:A/AC:M/Au:N/C:N/I:P/A:P
Weaknesses
CWE-22

Description

Directory traversal vulnerability in Eye-Fi Helper before 3.4.23 allows man-in-the-middle attackers to create arbitrary files via a .. (dot dot) in the filesignature in a GetPhotoStatus request.

Affected configurations

• eye eye-fi helper (<= 3.3.0) • eye eye-fi helper 2.0.3.0 • eye eye-fi helper 2.0.4.0 • eye eye-fi helper 2.5.1.0 • eye eye-fi helper 2.5.4.0 • eye eye-fi helper 2.5.5.0 • eye eye-fi helper 2.5.26.0 • eye eye-fi helper 2.5.27.0 • eye eye-fi helper 2.6.0.0 • eye eye-fi helper 2.6.9.0 • eye eye-fi helper 2.6.12.0 • eye eye-fi helper 3.1.2 • eye eye-fi helper 3.1.9 • eye eye-fi helper 3.2.2

Related

Weakness · CWE (1)

  • CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness

References