Home  >  CVE-2001-0853
CVE Details for CVE: CVE-2001-0853
Summary
Directory traversal vulnerability in Entrust GetAccess allows remote attackers to read arbitrary files via a .. (dot dot) in the locale parameter to (1) helpwin.gas.bat or (2) AboutBox.gas.bat.
Timestamps
Last major update 11-07-2017 - 01:29
Published 06-12-2001 - 05:00
Last modified 11-07-2017 - 01:29
References
Vulnerable Configurations
  • cpe:2.3:a:entrust:getaccess:all_versions:*:*:*:*:*:*:*
    cpe:2.3:a:entrust:getaccess:all_versions:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CWE
NVD-CWE-Other
CVSS
Base
5.0
Impact
2.9
Exploitability
10.0
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
PARTIAL NONE NONE
CVSS3
None
VIA4 references
cvss-vector via4
AV:N/AC:L/Au:N/C:P/I:N/A:N
refmap via4
bid 3508
bugtraq
  • 20011105 Entrust Bulletin E01-005: GetAccess Access Service vulnerability
  • 20011105 New getAccess[tm] Vulnerability
cert-vn VU#243243
xf getaccess-shellscripts-retrieve-files(7474)