CVE-2010-5102
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.2%
Directory traversal vulnerability in mod/tools/em/class.em_unzip.php in the unzip library in TYPO3 4.2.x before 4.2.16, 4.3.x before 4.3.9, and 4.4.x before 4.4.5 allows remote attackers to write arbitrary files via unspecified vectors.
Affected configurations
References
bugs.typo3.org/view.php?id=16362
secunia.com/advisories/35770
securesystems.ca/advisory.php?id=2010-001
typo3.org/teams/security/security-bulletins/typo3-core/typo3-sa-2010-022/
www.openwall.com/lists/oss-security/2011/01/13/2
www.openwall.com/lists/oss-security/2012/05/10/7
www.openwall.com/lists/oss-security/2012/05/11/3
www.openwall.com/lists/oss-security/2012/05/12/5
www.osvdb.org/70119
www.securityfocus.com/bid/45470
exchange.xforce.ibmcloud.com/vulnerabilities/64180
Related
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.008 Low
EPSS
Percentile
82.2%