CVE-2002-2403

Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via "...", "....", ".....", and other multiple dot sequences.

Published Bycve@mitre.org

Published DateDec 31, 2002, 05:00

Weakness Type (CWE):CWE-22

CVSS Metrics

Base Score

Vector String

AV:N/AC:L/Au:N/C:N/I:P/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

PARTIAL

Availability (A)

NONE

References

http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0073.html
http://securityreason.com/securityalert/3331
http://www.iss.net/security_center/static/10622.php
http://www.keyfocus.net/kfws/support/
http://www.securityfocus.com/archive/1/299742
http://www.securityfocus.com/bid/6180

Weakness Type (CWE):CWE-22

CVSS Metrics

Base Score

Vector String

AV:N/AC:L/Au:N/C:N/I:P/A:N

Base Severity

Version

2.0

Attack Vector (AV)

Attack Complexity (AC)

Privileges Required (PR)

User Interaction (UI)

Scope (S)

Confidentiality (C)

NONE

Integrity (I)

PARTIAL

Availability (A)

NONE