Lucene search
MitreCVE-2011-4696HistoryMar 03, 2014 - 4:55 p.m.
CVE-2011-4696
2014-03-0316:55:03
CWE-22
mitre
web.nvd.nist.gov
30
cve
2011
4696
directory traversal
vulnerability
eye-fi helper
arbitrary files
man-in-the-middle
nvd
CVSS2
4.3
Attack Vector
ADJACENT_NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:A/AC:M/Au:N/C:N/I:P/A:P
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
21.1%
Directory traversal vulnerability in Eye-Fi Helper before 3.4.23 allows man-in-the-middle attackers to create arbitrary files via a … (dot dot) in the filesignature in a GetPhotoStatus request.
Affected configurations
Node
eyeeye-fi_helperRange≤3.3.0
OReyeeye-fi_helperMatch2.0.3.0
OReyeeye-fi_helperMatch2.0.4.0
OReyeeye-fi_helperMatch2.5.1.0
OReyeeye-fi_helperMatch2.5.4.0
OReyeeye-fi_helperMatch2.5.5.0
OReyeeye-fi_helperMatch2.5.26.0
OReyeeye-fi_helperMatch2.5.27.0
OReyeeye-fi_helperMatch2.6.0.0
OReyeeye-fi_helperMatch2.6.9.0
OReyeeye-fi_helperMatch2.6.12.0
OReyeeye-fi_helperMatch3.1.2
OReyeeye-fi_helperMatch3.1.9
OReyeeye-fi_helperMatch3.2.2
| Vendor | Product | Version | CPE |
|---|---|---|---|
| eye | eye-fi_helper | * | cpe:2.3:a:eye:eye-fi_helper:*:*:*:*:*:*:*:* |
| eye | eye-fi_helper | 2.0.3.0 | cpe:2.3:a:eye:eye-fi_helper:2.0.3.0:*:*:*:*:*:*:* |
| eye | eye-fi_helper | 2.0.4.0 | cpe:2.3:a:eye:eye-fi_helper:2.0.4.0:*:*:*:*:*:*:* |
| eye | eye-fi_helper | 2.5.1.0 | cpe:2.3:a:eye:eye-fi_helper:2.5.1.0:*:*:*:*:*:*:* |
| eye | eye-fi_helper | 2.5.4.0 | cpe:2.3:a:eye:eye-fi_helper:2.5.4.0:*:*:*:*:*:*:* |
| eye | eye-fi_helper | 2.5.5.0 | cpe:2.3:a:eye:eye-fi_helper:2.5.5.0:*:*:*:*:*:*:* |
| eye | eye-fi_helper | 2.5.26.0 | cpe:2.3:a:eye:eye-fi_helper:2.5.26.0:*:*:*:*:*:*:* |
| eye | eye-fi_helper | 2.5.27.0 | cpe:2.3:a:eye:eye-fi_helper:2.5.27.0:*:*:*:*:*:*:* |
| eye | eye-fi_helper | 2.6.0.0 | cpe:2.3:a:eye:eye-fi_helper:2.6.0.0:*:*:*:*:*:*:* |
| eye | eye-fi_helper | 2.6.9.0 | cpe:2.3:a:eye:eye-fi_helper:2.6.9.0:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2011-4696
2014-03-03 16:55:03
cvelist
cvelist
CVE-2011-4696
2014-03-03 16:00:00
nessus
nessus
Eye-Fi Helper < 3.4.23 Directory Traversal
2013-03-26 00:00:00
prion
prion
Directory traversal
2014-03-03 16:55:00
CVSS2
4.3
Attack Vector
ADJACENT_NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:A/AC:M/Au:N/C:N/I:P/A:P
AI Score
6.7
Confidence
Low
EPSS
0.001
Percentile
21.1%
Related for CVE-2011-4696