CVE-2015-2166-EXPLOIT

CVE-2015-2166 - 爱立信Drutt移动服务交付平台（MSDP）中的目录遍历漏洞 CVE-2015-2166 是一个影响爱立信Drutt移动服务交付平台（MSDP）版本4、5和6中实例监控器的目录遍历漏洞。该漏洞允许远程攻击者通过在默认URI中利用“..%2f”（点-点编码斜杠）读取受影响系统上的任意文件。 受影响版本 - 爱立信Drutt移动服务交付平台（MSDP）版本4 - 爱立信Drutt移动服务交付平台（MSDP）版本5 - 爱立信Drutt移动服务交付平台（MSDP）版本6 影响与严重性 该漏洞的存在带来了严重的安全风险，因为它允许未经授权访问爱立信Drutt...

Ericsson Drutt Mobile Service Delivery Platform Directory Traversal Vulnerability

Ericsson Drutt Mobile Service Delivery Platform MSDP is a business support system from Ericsson, Sweden, that supports Service Delivery Platforms SDPs for on-site and off-portal services. A directory traversal vulnerability exists in Instance Monitor in Ericsson Drutt MSDP. A remote attacker coul...

CVE-2015-2166

Directory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobile Service Delivery Platform MSDP 4, 5, and 6 allows remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the default URI...

CVE-2015-2166

Ericsson Drutt Mobile Service Delivery Platform (MSDP) has a Local File Inclusion vulnerability in the Instance Monitor affecting versions 4–6. The flaw lets remote attackers read arbitrary files via a dot-dot-encoded slash (..%2f) in the default URI, enabling information disclosure. Root cause i...

CVE-2015-2166: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobile Service Delivery Platform MSDP 4, 5, and 6 allows remote attackers to read arbitrary files via a ..%2f dot dot encoded slash in the default URI...