CVE-2006-3534

Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.6 filters directory traversal sequences before decoding, which allows remote attackers…

published July 12, 2006

CVSS
—
EPSS
3%
Percentile
84.8
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.6 filters directory traversal sequences before decoding, which allows remote attackers to read arbitrary files via encoded dot dot (%2E%2E) sequences in an HTTP GET request for a file path containing "/content".

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02538 · 84.8th percentile
Published
2006-07-12T21:00Z
EPSS history
Timeline
  • 12 JUL 21:00Z
    Directory traversal vulnerability in Nullsoft SHOUTcast DSP before 1.9.6 filters directory traversal sequences before decoding, which allows remote attackers…
    cvelistv5