CVE-2013-4510

Severity CVSS v4.0:

Pending analysis

Type:

CWE-22 Path Traversal

Publication date:

18/11/2013

Last modified:

11/04/2025

Description

Directory traversal vulnerability in the client in Tryton 3.0.0, as distributed before 20131104 and earlier, allows remote servers to write arbitrary files via path separators in the extension of a report.

Impact

Vector 2.0

AV:N/AC:L/Au:N/C:N/I:C/A:N CVSS v2.0 Severity and Metrics:

Base Score: 7.80 HIGH
Vector: AV:N/AC:L/Au:N/C:N/I:C/A:N

Attack Vector (AV): Network
Attack Complexity (AC): Low
Authentication (Au): None
Confidentiality (C): None
Integrity (I): Complete
Availability (A): None

Base Score 2.0

7.80

Severity 2.0

HIGH

Vulnerable products and versions

CPE	From	Up to
cpe:2.3:a:tryton:tryton:3.0.0:::::::*

To consult the complete list of CPE names with products and versions, see this page

References to Advisories, Solutions, and Tools

http://hg.tryton.org/tryton/rev/357d0a4d9cb8
http://www.debian.org/security/2013/dsa-2791
http://www.openwall.com/lists/oss-security/2013/11/04/21
http://www.tryton.org/posts/security-release-for-issue3446.html
https://bugs.tryton.org/issue3446
http://hg.tryton.org/tryton/rev/357d0a4d9cb8
http://www.debian.org/security/2013/dsa-2791
http://www.openwall.com/lists/oss-security/2013/11/04/21
http://www.tryton.org/posts/security-release-for-issue3446.html
https://bugs.tryton.org/issue3446