What’s Vulnerable › Vulnerabilities
CVE-2006-5596
- Severity: high (CVSS 7.5 v2.0)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 3.0% probability of exploitation in the next 30 days
- Public exploit or detection template: yes
- Published: 2006-10-28 · updated 2026-06-16
Description
Directory traversal vulnerability in the SSL server in AEP Smartgate 4.3b allows remote attackers to download arbitrary files via ..\ (dot dot backslash) sequences in an HTTP GET request.
Affected products
References
- http://secunia.com/advisories/22550
- http://www.securityfocus.com/bid/20722
- http://www.vupen.com/english/advisories/2006/4224
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29817
- https://prdelka.blackart.org.uk/exploitz/prdelka-vs-AEP-smartgate.c
- https://www.exploit-db.com/exploits/2637
- http://secunia.com/advisories/22550
- http://www.securityfocus.com/bid/20722
- http://www.vupen.com/english/advisories/2006/4224
- https://exchange.xforce.ibmcloud.com/vulnerabilities/29817
- https://prdelka.blackart.org.uk/exploitz/prdelka-vs-AEP-smartgate.c
- https://www.exploit-db.com/exploits/2637
Get alerted when CVE-2006-5596 or the next vulnerability affects your stack