CVE-2005-3040

The vulnerability CVE-2005-3040 affects TAC Vista 4.0 (and possibly other versions before 4.3) via the web interface ISALogin.dll. The issue is a directory traversal: an attacker can read arbitrary files by supplying .. sequences in the Template parameter. This is a root-cause path traversal vuln...

TAC Vista "Template" Disclosure of Sensitive Information Vulnerability

Secunia Advisory: SA16854 Release Date: 2005-09-19 Critical: Moderately critical Impact: Exposure of sensitive information Where: From remote Solution Status: Vendor Patch Software: TAC Vista 3.x Select a product and view a complete list of all Patched/Unpatched Secunia advisories affecting it...

[Full-disclosure] [CIRT.DK - Advisory 37] TAC Vista Webstation 3.0 Directory Traversal bug in webinterface

TAC Vista is based on open technologies, TAC VistaR is one of the most advanced software solutions for building automation. TAC Vista efficiently and economically controls, checks and analyzes all building operations, allowing system operators to control and monitor entire systems on site or from...