CVE-2014-0632

2014-04-01 08:28:17 2015-10-13 18:35:21

Directory traversal vulnerability in EMC VPLEX GeoSynchrony 4.x and 5.x before 5.3 allows remote authenticated users to execute arbitrary code via unspecified vectors.

Vector

NETWORK

Complexity

LOW

Authentication

SINGLE_INSTANCE

Confidentiality

COMPLETE

Integrity

COMPLETE

Availability

COMPLETE

Emc Vplex geosynchrony 5.1 (not an official CPE) Emc Vplex geosynchrony 5.0 (not an official CPE) Emc Vplex geosynchrony 5.2 (not an official CPE) Emc Vplex geosynchrony 5.2.1 (not an official CPE) Emc Vplex geosynchrony 4.0 (not an official CPE)

Emc - Vplex geosynchrony

Advisory	Patch	Confirmed	Link
			66513
			20140326 ESA-2014-016: EMC VPLEX Multiple Vulnerabilitie...

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') (ID 22)

Related CAPEC 7 Relative Path Traversal (CAPEC-ID 139) Directory Traversal (CAPEC-ID 213) File System Function Injection, Content Based (CAPEC-ID 23) Using Slashes and URL Encoding Combined to Bypass Validation Logic (CAPEC-ID 64) Manipulating Input to File System Calls (CAPEC-ID 76) Using Escaped Slashes in Alternate Encoding (CAPEC-ID 78) Using Slashes in Alternate Encoding (CAPEC-ID 79)