CVE-2006-6345

Currently unrated

Key Information:

Vendor
SAP
Status
Internet Graphics Server
Vendor
CVE Published:
7 December 2006

Summary

Directory traversal vulnerability in SAP Internet Graphics Service (IGS) 6.40 Patchlevel 16 and earlier, and 7.00 Patchlevel 6 and earlier, allows remote attackers to delete arbitrary files via directory traversal sequences in an HTTP request. NOTE: This information is based upon an initial disclosure. Details will be updated after the grace period has ended. This issue is different from CVE-2006-4133 and CVE-2006-4134.

References

http://www.securityfocus.com/bid/21449
vdb-entryx_refsource_BID
https://exchange.xforce.ibmcloud.com/vulnerabilities/30765
vdb-entryx_refsource_XF
http://www.vupen.com/english/advisories/2006/4863
vdb-entryx_refsource_VUPEN

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.