CVE-2006-4140

CVE-2006-4140 describes a directory traversal vulnerability in IPCheck Server Monitor versions prior to 5.3.3.639/640. This flaw allows unauthenticated remote attackers to read arbitrary files on the affected system by manipulating URL paths with encoded or multiple dot-dot sequences. With a CVSS score of 5.0, this vulnerability is of medium severity, requiring no authentication and having low attack complexity, potentially leading to unauthorized information disclosure. While not listed on the KEV catalog, an exploit for this vulnerability is publicly available on ExploitDB, though there is no evidence of active exploitation, Metasploit modules, or significant community discussion.