PublicDate: 2005-10-30 20:02:00 UTC Candidate: CVE-2005-3123 References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-3123 Description: Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted sequences such as "/.//..//////././", which is collapsed into "/.././" after ".." and "//" sequences are removed. Ubuntu-Description: Notes: Priority: untriaged Discovered-by: Assigned-to: CVSS: Bugs: dapper_gnump3d: released (2.9.8-2) edgy_gnump3d: released (2.9.8-2) feisty_gnump3d: released (2.9.8-2) devel_gnump3d: released (2.9.8-2) upstream_gnump3d: needs-triage