CVE-2011-4696

Description

Directory traversal vulnerability in Eye-Fi Helper before 3.4.23 allows man-in-the-middle attackers to create arbitrary files via a .. (dot dot) in the filesignature in a GetPhotoStatus request.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/80995

https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-4614

http://www.securityfocus.com/bid/57163

http://www.pentest.co.uk/documents/ptl-2013-01.html

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS