GHSA-5JG5-W395-9684 Directory Traversal in ltt

Affected versions of ltt resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Example reques...

Directory Traversal

ltt is vulnerable to directory traversal attacks. These attacks are possible by requesting a url such as /..%2f..%2fetc/passwd to get sensitive information...

ltt directory traversal vulnerability

ltt is a static file server. A directory traversal vulnerability exists in ltt. An attacker can exploit this vulnerability by placing "... /" in a URL to access the file system...

CVE-2017-16212

ltt is a static file server. ltt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

Directory traversal

ltt is a static file server. ltt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

CVE-2017-16212

Summary: CVE-2017-16212 affects the static file server named ltt , with a directory traversal vulnerability that can be triggered by including relative paths (e.g., "../../"). Public details in connected advisories (GHSA-5JG5-W395-9684, Veracode, CNVD, etc.) describe that affected versions of ltt...

CVE-2017-16212: Improper Limitation of a Pathname to a Restricted Directory

ltt is a static file server. ltt is vulnerable to a directory traversal issue, giving an attacker access to the filesystem by placing "../" in the url...

Directory Traversal

Overview Affected versions of ltt resolve relative file paths, resulting in a directory traversal vulnerability. A malicious actor can use this vulnerability to access files outside of the intended directory root, which may result in the disclosure of private files on the vulnerable system. Examp...

CVE-2008-0707

CVE-2008-0707 affects HP StorageWorks Library and Tape Tools (LTT) prior to v4.5 SR1 on HP-UX B.11.11 and B.11.23, enabling local privilege escalation via unspecified vectors. The vulnerability is documented in HP security bulletin HPSBST02321 (SSRT080029 rev.1) and in the NVD entry; HP states th...

CVE-2008-0707: Undefined Security Weakness

HP StorageWorks Library and Tape Tools LTT before 4.5 SR1 on HP-UX B.11.11 and B.11.23 allows local users to gain privileges via unspecified vectors...