CVE-2002-0772

Опубликовано: 12 авг. 2002

Источник: nvd

CVSS2: 6.4

EPSS Низкий

Описание

Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName parameter.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2002-05/0142.html
Patch
Vendor Advisory
http://www.iss.net/security_center/static/9104.php
Vendor Advisory
http://www.securityfocus.com/bid/4759
Exploit
Patch
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-05/0142.html
Patch
Vendor Advisory
http://www.iss.net/security_center/static/9104.php
Vendor Advisory
http://www.securityfocus.com/bid/4759
Exploit
Patch
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:hosting_controller:hosting_controller:1.1:*:*:*:*:*:*:*

cpe:2.3:a:hosting_controller:hosting_controller:1.3:*:*:*:*:*:*:*

cpe:2.3:a:hosting_controller:hosting_controller:1.4:*:*:*:*:*:*:*

cpe:2.3:a:hosting_controller:hosting_controller:1.4.1:*:*:*:*:*:*:*

cpe:2.3:a:hosting_controller:hosting_controller:1.4b:*:*:*:*:*:*:*

EPSS

Процентиль: 95%

0.09241

Низкий

6.4 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-7676-43cm-ffjm

github

больше 4 лет назад