Published: 06/04/2015 Updated: 03/12/2016

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Subscribe to Drutt Mobile Service Delivery Platform

Directory traversal vulnerability in the Instance Monitor in Ericsson Drutt Mobile Service Delivery Platform (MSDP) 4, 5, and 6 allows remote malicious users to read arbitrary files via a ..%2f (dot dot encoded slash) in the default URI.

Vulnerable Product	Search on Vulmon	Subscribe to Product
ericsson drutt mobile service delivery platform 6.0
ericsson drutt mobile service delivery platform 4.0
ericsson drutt mobile service delivery platform 5.0

+------------------------------------------------------------------------------------------------------+ + Ericsson Drutt MSDP (Instance Monitor) - Directory Traversal Vulnerability and Arbitrary File Access + +------------------------------------------------------------------------------------------------------+ Affected Product: Ericsson Drutt MS ...

Ericsson Drutt MSDP (Instance Monitor) versions 4, 5, and 6 suffer from directory traversal and arbitrary file access vulnerabilities ...

A PoC exploit for CVE-2015-2166 - Directory Traversal Vulnerability in Ericsson Drutt Mobile Service Delivery Platform (MSDP)

CVE-2015-2166 - Directory Traversal Vulnerability in Ericsson Drutt Mobile Service Delivery Platform (MSDP) CVE-2015-2166 is a directory traversal vulnerability that affects the Instance Monitor in Ericsson Drutt Mobile Service Delivery Platform (MSDP) versions 4, 5, and 6 The vulnerability allows remote attackers to read arbitrary files on the affected system by exploiting a

CWE-22 http://packetstormsecurity.com/files/131233/Ericsson-Drutt-MSDP-Instance-Monitor-Directory-Traversal-File-Access.html http://www.securityfocus.com/bid/73901 https://www.exploit-db.com/exploits/36619/https://nvd.nist.gov https://github.com/K3ysTr0K3R/CVE-2015-2166-EXPLOIT https://www.exploit-db.com/exploits/36619/

CVE-2015-2166

Vulnerability Summary

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect