Directory traversal

Directory traversal vulnerability in geohttpserver in Geovision Digital Video Surveillance System 8.2 allows remote attackers to read arbitrary files via a .. dot dot in a GET request...

PT-2011-1336

Name of the Vulnerable Software and Affected Versions Geovision Digital Video Surveillance System version 8.2 Description A directory traversal issue exists, allowing remote attackers to read arbitrary files by including a .. dot dot in a GET request to the geohttpserver. Recommendations For...

CVE-2009-5087: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in geohttpserver in Geovision Digital Video Surveillance System 8.2 allows remote attackers to read arbitrary files via a .. dot dot in a GET request...

CVE-2005-1553: Undefined Security Weakness

GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0 uses a weak encryption scheme to encrypt passwords, which allows remote attackers to obtain the password via sniffing...

CVE-2005-1552: Undefined Security Weakness

GeoVision Digital Video Surveillance System 6.04, 6.1 and 7.0, when set to create JPEG images, does not properly protect an image even when a password and username is assigned, which may allow remote attackers to gain sensitive information via a direct request to the image...