Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

ReGet Software ReGet Directory Traversal Vulnerability

It has been reported that ReGet may be prone to a directory traversal vulnerability that may allow remote attackers to upload files to arbitrary locations on a target system. The attacker may supply encoded directory traversal sequences in the URI parameter so that the requested file is saved outside of the default download directory specified by the user.

ReGet Deluxe 3.0 build 121 has been reported to be prone to this issue, however, other versions could be affected as well.







 

Privacy Statement
Copyright 2009, SecurityFocus