Re: CVE request: nucleus cms < 3.40 (3.33 and below) directory traversal

["Steven M. Christey" <coley () linus mitre org>]

======================================================
Name: CVE-2009-0929
Status: Candidate
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0929
Reference: CONFIRM:http://www.nucleuscms.org/index.php/item/index.php/item/3051
Reference: SECUNIA:34180
Reference: URL:http://secunia.com/advisories/34180
Reference: VUPEN:ADV-2009-0637
Reference: URL:http://www.vupen.com/english/advisories/2009/0637
Reference: XF:nucleuscms-mediamanager-directory-traversal(49142)
Reference: URL:http://xforce.iss.net/xforce/xfdb/49142

Directory traversal vulnerability in the media manager in Nucleus CMS
before 3.40 allows remote attackers to read arbitrary files via
unknown vectors.