Lucene search

K
cve[email protected]CVE-2011-4711
HistoryDec 08, 2011 - 7:55 p.m.

CVE-2011-4711

2011-12-0819:55:05
CWE-22
web.nvd.nist.gov
20
cve
2011
4711
directory traversal
vulnerabilities
namazu.cgi
namazu
remote attackers
arbitrary files
nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.9 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.7%

Multiple directory traversal vulnerabilities in namazu.cgi in Namazu before 2.0.16 allow remote attackers to read arbitrary files via a … (dot dot) in the (1) lang or (2) result parameter.

Affected configurations

NVD
Node
namazunamazuRange2.0.16rc3
OR
namazunamazuMatch0.1.0
OR
namazunamazuMatch0.1.1
OR
namazunamazuMatch0.1.2
OR
namazunamazuMatch0.1.3
OR
namazunamazuMatch0.1.4
OR
namazunamazuMatch0.2.0
OR
namazunamazuMatch0.2.1
OR
namazunamazuMatch0.2.2
OR
namazunamazuMatch0.3.0
OR
namazunamazuMatch0.3.1
OR
namazunamazuMatch0.3.2
OR
namazunamazuMatch0.3.3
OR
namazunamazuMatch1.0.0
OR
namazunamazuMatch1.0.1
OR
namazunamazuMatch1.0.2
OR
namazunamazuMatch1.0.3
OR
namazunamazuMatch1.0.4
OR
namazunamazuMatch1.0.4a
OR
namazunamazuMatch1.0.4b
OR
namazunamazuMatch1.1.0
OR
namazunamazuMatch1.1.0a
OR
namazunamazuMatch1.1.1
OR
namazunamazuMatch1.1.1.1
OR
namazunamazuMatch1.1.1.2
OR
namazunamazuMatch1.1.1.3
OR
namazunamazuMatch1.1.1.4
OR
namazunamazuMatch1.1.1.5
OR
namazunamazuMatch1.1.2
OR
namazunamazuMatch1.1.2.1
OR
namazunamazuMatch1.1.2.2
OR
namazunamazuMatch1.1.2.3
OR
namazunamazuMatch1.1.2.4
OR
namazunamazuMatch1.1.2.5
OR
namazunamazuMatch1.2.0
OR
namazunamazuMatch1.2.0.1
OR
namazunamazuMatch1.2.0.2
OR
namazunamazuMatch1.2.0.3
OR
namazunamazuMatch1.2.0.4
OR
namazunamazuMatch1.2.0.5beta2
OR
namazunamazuMatch1.2.1.0beta10
OR
namazunamazuMatch1.2.1.0beta11
OR
namazunamazuMatch1.2.1.0beta12
OR
namazunamazuMatch1.2.1.0beta13
OR
namazunamazuMatch1.2.1.0beta5
OR
namazunamazuMatch1.2.1.0beta6
OR
namazunamazuMatch1.2.1.0beta7
OR
namazunamazuMatch1.2.1.0beta8
OR
namazunamazuMatch1.2.1.0beta9
OR
namazunamazuMatch1.3.0.0
OR
namazunamazuMatch1.3.0.0beta1
OR
namazunamazuMatch1.3.0.0beta10
OR
namazunamazuMatch1.3.0.0beta11
OR
namazunamazuMatch1.3.0.0beta12
OR
namazunamazuMatch1.3.0.0beta13
OR
namazunamazuMatch1.3.0.0beta2
OR
namazunamazuMatch1.3.0.0beta3
OR
namazunamazuMatch1.3.0.0beta4
OR
namazunamazuMatch1.3.0.0beta5
OR
namazunamazuMatch1.3.0.0beta6
OR
namazunamazuMatch1.3.0.0beta7
OR
namazunamazuMatch1.3.0.0beta8
OR
namazunamazuMatch1.3.0.0beta9
OR
namazunamazuMatch1.3.0.1
OR
namazunamazuMatch1.3.0.1beta1
OR
namazunamazuMatch1.3.0.2
OR
namazunamazuMatch1.3.1.0alpha1
OR
namazunamazuMatch1.3.1.0alpha10
OR
namazunamazuMatch1.3.1.0alpha11
OR
namazunamazuMatch1.3.1.0alpha2
OR
namazunamazuMatch1.3.1.0alpha3
OR
namazunamazuMatch1.3.1.0alpha4
OR
namazunamazuMatch1.3.1.0alpha5
OR
namazunamazuMatch1.3.1.0alpha6
OR
namazunamazuMatch1.3.1.0alpha7
OR
namazunamazuMatch1.3.1.0alpha8
OR
namazunamazuMatch1.3.1.0alpha9
OR
namazunamazuMatch1.4.0.0alpha1
OR
namazunamazuMatch1.4.0.0alpha2
OR
namazunamazuMatch1.4.0.0alpha3
OR
namazunamazuMatch1.4.0.0alpha4
OR
namazunamazuMatch1.4.0.0alpha5
OR
namazunamazuMatch1.4.0.0alpha6
OR
namazunamazuMatch1.4.0.0alpha7
OR
namazunamazuMatch1.4.0.0beta1
OR
namazunamazuMatch1.4.0.0beta2
OR
namazunamazuMatch1.4.0.0beta3
OR
namazunamazuMatch1.4.0.0beta4
OR
namazunamazuMatch1.4.0.0beta5
OR
namazunamazuMatch1.4.0.0beta6
OR
namazunamazuMatch1.4.0.0beta7
OR
namazunamazuMatch1.4.0.0beta8
OR
namazunamazuMatch2.0
OR
namazunamazuMatch2.0.1
OR
namazunamazuMatch2.0.2
OR
namazunamazuMatch2.0.3
OR
namazunamazuMatch2.0.4
OR
namazunamazuMatch2.0.5
OR
namazunamazuMatch2.0.6
OR
namazunamazuMatch2.0.6pre1
OR
namazunamazuMatch2.0.6pre2
OR
namazunamazuMatch2.0.6pre3
OR
namazunamazuMatch2.0.6rc1
OR
namazunamazuMatch2.0.6rc2
OR
namazunamazuMatch2.0.6rc3
OR
namazunamazuMatch2.0.6rc4
OR
namazunamazuMatch2.0.6rc5
OR
namazunamazuMatch2.0.6rc6
OR
namazunamazuMatch2.0.6rc7
OR
namazunamazuMatch2.0.7
OR
namazunamazuMatch2.0.7pre1
OR
namazunamazuMatch2.0.7pre2
OR
namazunamazuMatch2.0.7pre3
OR
namazunamazuMatch2.0.8
OR
namazunamazuMatch2.0.8pre1
OR
namazunamazuMatch2.0.9
OR
namazunamazuMatch2.0.9rc1
OR
namazunamazuMatch2.0.10
OR
namazunamazuMatch2.0.10rc1
OR
namazunamazuMatch2.0.10rc2
OR
namazunamazuMatch2.0.11
OR
namazunamazuMatch2.0.11pre1
OR
namazunamazuMatch2.0.11pre2
OR
namazunamazuMatch2.0.11pre3
OR
namazunamazuMatch2.0.11pre4
OR
namazunamazuMatch2.0.12
OR
namazunamazuMatch2.0.13
OR
namazunamazuMatch2.0.13pre3
OR
namazunamazuMatch2.0.13pre4
OR
namazunamazuMatch2.0.13pre5
OR
namazunamazuMatch2.0.13pre6
OR
namazunamazuMatch2.0.13pre7
OR
namazunamazuMatch2.0.13pre8
OR
namazunamazuMatch2.0.13rc1
OR
namazunamazuMatch2.0.13rc2
OR
namazunamazuMatch2.0.13rc3
OR
namazunamazuMatch2.0.13rc4
OR
namazunamazuMatch2.0.15
OR
namazunamazuMatch2.0.15pre1
OR
namazunamazuMatch2.0.15pre2
OR
namazunamazuMatch2.0.15pre3
OR
namazunamazuMatch2.0.15pre4
OR
namazunamazuMatch2.0.15rc1
OR
namazunamazuMatch2.0.15rc2
OR
namazunamazuMatch2.0.15rc3
OR
namazunamazuMatch2.0.15rc4
OR
namazunamazuMatch2.0.15rc5
OR
namazunamazuMatch2.0.16rc2

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.9 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.7%