VYPR
Unrated severityNVD Advisory· Published Oct 30, 2005· Updated Jun 16, 2026

CVE-2005-3123

CVE-2005-3123

Description

Directory traversal vulnerability in GNUMP3D before 2.9.6 allows remote attackers to read arbitrary files via crafted sequences such as "/.//..//////././", which is collapsed into "/.././" after ".." and "//" sequences are removed.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

7
  • GNU/Gnump3d7 versions
    cpe:2.3:a:gnu:gnump3d:2.9:*:*:*:*:*:*:*+ 6 more
    • cpe:2.3:a:gnu:gnump3d:2.9:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:gnump3d:2.9.1:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:gnump3d:2.9.2:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:gnump3d:2.9.3:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:gnump3d:2.9.4:*:*:*:*:*:*:*
    • cpe:2.3:a:gnu:gnump3d:2.9.5:*:*:*:*:*:*:*
    • (no CPE)range: <2.9.6

Patches

Vulnerability mechanics

References

11

News mentions

0

No linked articles in our index yet.