CVE-2010-0620
high · 9.3Directory traversal vulnerability in the SSL Service in EMC HomeBase Server 6.2.x before 6.2.3 and 6.3.x before 6.3.2 allows remote attackers to overwrite arbitrary files with any content, and consequently execute arbitrary code, via a .. (dot dot) in an unspecified parameter.
9.3
CVSS
19.5%
EPSS (exploit prob.)
97th
EPSS percentile
2010-02-25
Published
AV:N/AC:M/Au:N/C:C/I:C/A:C
Weaknesses
CWE-22
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| emc | homebase_server | 6.2 |
| emc | homebase_server | 6.3 |
Check a specific version with /api/v1/cve/match.
References
- http://securityreason.com/securityalert/8230
- http://www.securityfocus.com/archive/1/509723/100/0/threaded
- http://www.securityfocus.com/bid/38380
- http://www.vupen.com/english/advisories/2010/0458
- http://www.zerodayinitiative.com/advisories/ZDI-10-020/
- http://securityreason.com/securityalert/8230
- http://www.securityfocus.com/archive/1/509723/100/0/threaded
- http://www.securityfocus.com/bid/38380
- http://www.vupen.com/english/advisories/2010/0458
- http://www.zerodayinitiative.com/advisories/ZDI-10-020/
Query this programmatically:
curl https://evil-db.io/api/v1/cve/CVE-2010-0620