CVE-2006-4140: Ipcheck Server Monitor

Medium severity, CVSS 5.0. EPSS: 4.4% chance of exploitation in the next 30 days.

Directory traversal vulnerability in IPCheck Server Monitor before 5.3.3.639/640 allows remote attackers to read arbitrary files via modified .. (dot dot) sequences in the URL, including (1) "..%2f" (encoded "/" slash), "..../" (multiple dot), and "..%255c../" (double-encoded "\" backslash).

Affected products

• Ipcheck Server Monitor: version 4.3.1.368 only; version 4.3.1.382 only; version 4.4.1.521 only; version 4.4.1.522 only; version 5.0.1.272 only; version 5.0.1.299 only; …

Published 2006-08-14. Last modified 2026-06-16.