CVE-2004-2640

Опубликовано: 31 дек. 2004

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in lstat.cgi in LinuxStat before 2.3.1 allows remote attackers to read arbitrary files via (1) .. (dot dot) sequences or (2) absolute paths to the template parameter.

Ссылки

http://secunia.com/advisories/12963
Patch
Vendor Advisory
http://securitytracker.com/id?1011920
Exploit
http://sourceforge.net/project/shownotes.php?release_id=277371
http://www.osvdb.org/11103
Patch
http://www.securityfocus.com/bid/11517
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/17833
http://secunia.com/advisories/12963
Patch
Vendor Advisory
http://securitytracker.com/id?1011920
Exploit
http://sourceforge.net/project/shownotes.php?release_id=277371
http://www.osvdb.org/11103
Patch
http://www.securityfocus.com/bid/11517
Exploit
Patch
https://exchange.xforce.ibmcloud.com/vulnerabilities/17833

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:ryszard_pydo:linuxstat:0.90:*:*:*:*:*:*:*

cpe:2.3:a:ryszard_pydo:linuxstat:0.94:*:*:*:*:*:*:*

cpe:2.3:a:ryszard_pydo:linuxstat:2.0:*:*:*:*:*:*:*

cpe:2.3:a:ryszard_pydo:linuxstat:2.0_beta:*:*:*:*:*:*:*

cpe:2.3:a:ryszard_pydo:linuxstat:2.0_beta2:*:*:*:*:*:*:*

cpe:2.3:a:ryszard_pydo:linuxstat:2.1:*:*:*:*:*:*:*

cpe:2.3:a:ryszard_pydo:linuxstat:2.2:*:*:*:*:*:*:*

cpe:2.3:a:ryszard_pydo:linuxstat:2.3:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.08116

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-rqvp-h98w-9g7q

github

больше 4 лет назад