Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Directory traversal vulnerability in Arcserve UDP before 5.0 Update 4 allows remote attackers to obtain sensitive information or cause a denial of service via a crafted file path to the (1) reportFileServlet or (2) exportServlet servlet.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Arcserve UDP 目录遍历漏洞
Vulnerability Description
Arcserve UDP(Unified Data Protection)是美国Arcserve公司的一套统一数据保护解决方案。该方案提供所有虚拟和物理环境的备份和恢复、全局重复数据删除等功能。 Arcserve UDP 5.0 Update 4之前版本的reportFileServlet和exportServlet servlet中存在目录遍历漏洞。远程攻击者可借助特制的文件路径利用该漏洞获取敏感信息或造成拒绝服务。
CVSS Information
N/A
Vulnerability Type
N/A