CVE-2013-0332
CVE-2013-0332
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Multiple directory traversal vulnerabilities in ZoneMinder 1.24.x before 1.24.4 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) view, (2) request, or (3) action parameter.
EPSS 10.2% · Public exploit · Fix available
- Published
- Updated
Stack: system
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
zoneminder Debian:12
- Affected ranges
- ECOSYSTEM: < 1.25.0-1
Update to 1.25.0-1
zoneminder Debian:13
- Affected ranges
- ECOSYSTEM: < 1.25.0-1
Update to 1.25.0-1
zoneminder Debian:14
- Affected ranges
- ECOSYSTEM: < 1.25.0-1
Update to 1.25.0-1
Original sources
- http://www.zoneminder.com/forums/viewtopic.php?f=1&t=17979
- http://www.zoneminder.com/wiki/index.php/Change_History
- http://www.debian.org/security/2013/dsa-2640
- http://www.openwall.com/lists/oss-security/2013/02/21/8
- http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=700912
- http://www.openwall.com/lists/oss-security/2013/02/21/9
- https://nvd.nist.gov/vuln/detail/CVE-2013-0332