← Database

CVE-2005-3484

MEDIUM CVSS: 5.0 Published: 2005-11-03 Modified: 2026-06-16

Description

Directory traversal vulnerability in NeroNET 1.2.0.2 and earlier allows remote attackers to read arbitrary files with certain file extensions (such as ZIP, AVI, JPG, TXT, and HTML) via ".." and hex-encoded (1) slash "/" ("%2f") or (2) backslash "\" ("%5c") sequences.

Affected Platforms

Nero Neronet

Weakness Type

NVD-CWE-Other

References