CVE-2006-5596

CVE-2006-5596 affects the SSL server component of AEP Smartgate 4.3b. The vulnerability is a directory traversal that allows remote attackers to download arbitrary files by sending HTTP GET requests containing dot-dot backslash sequences (..\

CVE-2006-5725

The CVE-2006-5725 entry affects the SSL server in AEP Smartgate 4.3b, where remote attackers can determine the existence of directories by requesting a directory URI and receiving different HTTP status codes for existing vs non-existing directories. This describes an information-disclosure flaw i...