CVE-2002-0418

Опубликовано: 12 авг. 2002

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in the com.endymion.sake.servlet.mail.MailServlet servlet for Endymion SakeMail 1.0.36 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) and a null character in the param_name parameter.

Ссылки

http://online.securityfocus.com/archive/1/259730
Vendor Advisory
http://www.iss.net/security_center/static/8358.php
Vendor Advisory
http://www.securityfocus.com/bid/4223
Exploit
Vendor Advisory
http://online.securityfocus.com/archive/1/259730
Vendor Advisory
http://www.iss.net/security_center/static/8358.php
Vendor Advisory
http://www.securityfocus.com/bid/4223
Exploit
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:endymion:sake_mail:1.0.20:*:*:*:*:*:*:*

cpe:2.3:a:endymion:sake_mail:1.0.21:*:*:*:*:*:*:*

cpe:2.3:a:endymion:sake_mail:1.0.22:*:*:*:*:*:*:*

cpe:2.3:a:endymion:sake_mail:1.0.23:*:*:*:*:*:*:*

cpe:2.3:a:endymion:sake_mail:1.0.24:*:*:*:*:*:*:*

cpe:2.3:a:endymion:sake_mail:1.0.26:*:*:*:*:*:*:*

cpe:2.3:a:endymion:sake_mail:1.0.27:*:*:*:*:*:*:*

cpe:2.3:a:endymion:sake_mail:1.0.28:*:*:*:*:*:*:*

cpe:2.3:a:endymion:sake_mail:1.0.29:*:*:*:*:*:*:*

cpe:2.3:a:endymion:sake_mail:1.0.30:*:*:*:*:*:*:*

cpe:2.3:a:endymion:sake_mail:1.0.31:*:*:*:*:*:*:*

cpe:2.3:a:endymion:sake_mail:1.0.33:*:*:*:*:*:*:*

cpe:2.3:a:endymion:sake_mail:1.0.34:*:*:*:*:*:*:*

cpe:2.3:a:endymion:sake_mail:1.0.35:*:*:*:*:*:*:*

cpe:2.3:a:endymion:sake_mail:1.0.36:*:*:*:*:*:*:*

EPSS

Процентиль: 49%

0.00263

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-v5gw-6wv6-2mj2

github

почти 4 года назад