KLA10285 RLF vulnerability in Orb

A directory traversal vulnerability was found in Orb. By exploiting this vulnerability malicious users can read arbitrary files. This vulnerability can be exploited remotely via a specially designed GET request.

Original advisories

Related products

Orb

CVE list

CVE-2008-5645 critical

Solution

Update to latest version

Impacts

• RLF

Read Local Files. Exploitation of vulnerabilities with this impact can lead to reading some inaccessible files. Files that can be read depends on conсrete program errors.

Affected Products

• Orb Networks Orb versions 2.01.0021 and earlier