Lexmark Markvision Enterprise LibraryFileUploadServlet Directory Traversal (CVE-2014-9375)

A directory traversal vulnerability has been reported in Lexmark Markvision Enterprise. The vulnerability is due to insufficient input validation in LibraryFileUploadServlet when processing zip files. A remote, unauthenticated attacker could exploit this vulnerability by enticing the target user ...

Lexmark Markvision Enterprise LibraryFileUploadServlet servlet directory traversal vulnerability

Lexmark Markvision Enterprise is the United States Lexmark Lexmark a set of Web-based network device management software. The software is mainly used to manage network devices such as printers, such as providing some printer drivers for Unix systems. A directory traversal vulnerability exists in...

Directory traversal

Directory traversal vulnerability in the LibraryFileUploadServlet servlet in Lexmark Markvision Enterprise allows remote authenticated users to write to and execute arbitrary files via a .. dot dot in a file path in a ZIP archive...

CVE-2014-9375

Directory traversal vulnerability in the LibraryFileUploadServlet servlet in Lexmark Markvision Enterprise allows remote authenticated users to write to and execute arbitrary files via a .. dot dot in a file path in a ZIP archive...

CVE-2014-9375: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the LibraryFileUploadServlet servlet in Lexmark Markvision Enterprise allows remote authenticated users to write to and execute arbitrary files via a .. dot dot in a file path in a ZIP archive...

PT-2015-4190

Name of the Vulnerable Software and Affected Versions Lexmark Markvision Enterprise affected versions not specified Description The issue allows remote authenticated users to write to and execute arbitrary files via a .. dot dot in a file path in a ZIP archive. This is due to a directory traversa...