CVE-2006-0513

Currently unrated

Key Information:

Vendor
IBM
Status
Tivoli Access Manager For E-business
Vendor
CVE Published:
6 February 2006

Summary

Directory traversal vulnerability in pkmslogout in Tivoli Web Server Plug-in 5.1.0.10 in Tivoli Access Manager (TAM) 5.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the filename parameter.

References

http://lists.grok.org.uk/pipermail/full-disclosure/2006-F...
mailing-listx_refsource_FULLDISC
http://www-1.ibm.com/support/docview.wss?uid=swg24011562
vendor-advisoryx_refsource_AIXAPAR
http://www.vupen.com/english/advisories/2006/0442
vdb-entryx_refsource_VUPEN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.