Vordel Gateway is prone to a directory-traversal vulnerability because it fails to sufficiently sanitize user-supplied input. A remote attacker could exploit this vulnerability using directory- traversal strings (such as '../') to gain access to arbitrary files on the targeted system. This may result in the disclosure of sensitive information or lead to a complete compromise of the affected computer. Vordel Gateway 6.0.3 is vulnerable other versions may also be affected.

Reportedly, the issue is fixed however, Symantec has not confirmed this. Please contact the vendor for more information.

• http://www.vordel.com/
• https://www.securityfocus.com/bid/47975

---

Updated on 2017-03-28