CVE-2012-5344

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 7.2% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2012-10-09 · updated 2026-06-16
Weakness: CWE-22

Description

Directory traversal vulnerability in the WebServer (Thttpd.bat) in IpTools (aka Tiny TCP/IP server) 0.1.4 allows remote attackers to read arbitrary files via a .. (dot dot) in a HTTP request.

Affected products

Kepler Lam Iptools: 0.1.4

References

http://archives.neohapsis.com/archives/bugtraq/2012-01/0045.html
http://www.securityfocus.com/bid/51311
http://archives.neohapsis.com/archives/bugtraq/2012-01/0045.html
http://www.securityfocus.com/bid/51311

Get alerted when CVE-2012-5344 or the next vulnerability affects your stack