CVE-2016-1505

10.0 CRITICAL

Published: February 03, 2016 Modified: May 06, 2026

Description

The filesystem storage backend in Radicale before 1.1 on Windows allows remote attackers to read or write to arbitrary files via a crafted path, as demonstrated by /c:/file/ignore.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

CVSS v3.x Details

0.0 Low Medium High Critical 10.0

Vector String

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:N

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://www.openwall.com/lists/oss-security/2016/01/05/7

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2016/01/06/4

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2016/01/06/7

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2016/01/07/7

Source: cve@mitre.org

http://www.securityfocus.com/bid/80255

Source: cve@mitre.org

https://github.com/Kozea/Radicale/pull/343

Source: cve@mitre.org

Patch

https://github.com/Unrud/Radicale/commit/b4b3d51f33c7623d312f289252dd7bbb8f58bbe6

Source: cve@mitre.org

http://www.openwall.com/lists/oss-security/2016/01/05/7