Phase:Directory traversal vulnerability in Carello 1.3 allows remote attackers to execute programs on the server via a .. (dot dot) in the VBEXE parameter.
ReferencesBUGTRAQ:Wednesday, July 10, 2002 wp-02-0012: Carello 1.3 Remote File Execution | URL:http://marc.theaimsgroup.com/?l=bugtraq&m=102631808212876&w=2 | VULNWATCH:Wednesday, July 10, 2002 wp-02-0012: Carello 1.3 Remote File Execution | URL:http://archives.neohapsis.com/archives/
Votes:Modified (Wednesday, August 18, 2004)
Comments: ACCEPT(1) Baker | MODIFY(1) Frech | NOOP(6) Christey, Wall, Foat, Cole, Armstrong, Cox
F7: Christey> XF:carello-local-file-execution(9521) | URL:http://www.iss.net/security_center/static/9521.php | BID:5192 | URL:http://www.securityfocus.com/bid/5192 | Christey> VULNWATCH:20021002 wp-02-0012: Carello 1.3 Remote File Execution (Updated 1/10/2002) | Frech> XF:carello-local-file-execution(9521)