CVE-2014-9181 in Media Server

Zusammenfassung (Englisch)

Multiple directory traversal vulnerabilities in Plex Media Server before 0.9.9.3 allow remote attackers to read arbitrary files via a .. (dot dot) in the URI to (1) manage/ or (2) web/ or remote authenticated users to read arbitrary files via a .. (dot dot) in the URI to resources/.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

Reservieren

02.12.2014

Veröffentlichung

02.12.2014

Status

Bestätigt

Einträge

VulDB provides additional information and datapoints for this CVE:

ID	Schwachstelle	CWE	Aus	Mas	CVE
73063	Plex Media Server Directory Traversal	22	Proof-of-Concept	Offizieller Fix	CVE-2014-9181
12521	Plex Media Server manage Directory Traversal	22	Proof-of-Concept	Offizieller Fix	CVE-2014-9181
12520	Plex Media Server Authentication proxy Directory Traversal	22	Proof-of-Concept	Offizieller Fix	CVE-2014-9181

Quellen

• MITRE
• NVD
• CVE Details