CVE-2005-2731: Astaro Security Linux

Low severity, CVSS 2.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Directory traversal vulnerability in Astaro Security Linux 6.0, when using Webmin, allows remote authenticated webmin users to read arbitrary files via a .. (dot dot) in the wfe_download parameter to index.fpl.

Affected products

• Astaro Security Linux: version 6.001 only

Published 2005-08-30. Last modified 2026-06-16.