CVE-2011-4350

MediumCVSS 6.5/10Last modified Jun 16, 2026

Description

Yaws 1.91 has a directory traversal vulnerability in the way certain URLs are processed. A remote authenticated user could use this flaw to obtain content of arbitrary local files via specially-crafted URL request.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
yaws	yaws	1.91

References

https://access.redhat.com/security/cve/cve-2011-4350Broken Link
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=650009Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4350Exploit, Issue Tracking, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2011-4350Third Party Advisory
https://www.openwall.com/lists/oss-security/2011/11/25/7Mailing List, Third Party Advisory
https://access.redhat.com/security/cve/cve-2011-4350Broken Link
https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=650009Third Party Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2011-4350Exploit, Issue Tracking, Third Party Advisory
https://security-tracker.debian.org/tracker/CVE-2011-4350Third Party Advisory
https://www.openwall.com/lists/oss-security/2011/11/25/7Mailing List, Third Party Advisory

Timeline

Published: Nov 26, 2019
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2011

CVE-2011-43517.5Buffer overflow in FFmpeg before 0.5.6, 0.6.x before 0.6.4, 0.7.x before 0.7.8, and 0.8.x before 0.8.8 allows remote attackers to execute ar CVE-2011-43526.8Integer overflow in the vp3_dequant function in the VP3 decoder (vp3.c) in libavcodec in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7.CVE-2011-43534.3The (1) av_image_fill_pointers, (2) vp5_parse_coeff, and (3) vp6_parse_coeff functions in FFmpeg 0.5.x before 0.5.7, 0.6.x before 0.6.4, 0.7 CVE-2011-43545.8crypto/bn/bn_nist.c in OpenSSL before 0.9.8h on 32-bit platforms, as used in stunnel and other products, in certain circumstances involving CVE-2011-43556.9GNU Project Debugger (GDB) before 7.5, when .debug_gdb_scripts is defined, automatically loads certain files from the current working direct CVE-2011-43566.9Celery 2.1 and 2.2 before 2.2.8, 2.3 before 2.3.4, and 2.4 before 2.4.4 changes the effective id but not the real id during processing of th CVE-2011-43577.5Format string vulnerability in the p_cgi_error function in python/neo_cgi.c in the Python CGI Kit (neo_cgi) module for Clearsilver 0.10.5 an CVE-2011-43586.4Unspecified vulnerability in Oracle GlassFish Enterprise Server 3.0.1 and 3.1.1 allows remote attackers to affect confidentiality and integr CVE-2011-43605.0MediaWiki before 1.17.1 allows remote attackers to obtain the page titles of all restricted pages via a series of requests involving the (1)CVE-2011-43615.0MediaWiki before 1.17.1 does not check for read permission before handling action=ajax requests, which allows remote attackers to obtain sen CVE-2011-43625.0Integer signedness error in the base64_decode function in the HTTP authentication functionality (http_auth.c) in lighttpd 1.4 before 1.4.30 CVE-2011-43632.6ProcessTable.pm in the Proc::ProcessTable module 0.45 for Perl, when TTY information caching is enabled, allows local users to overwrite arb