CVE-2002-0543

Exploit

EPSS 10.26%
Veröffentlicht 03.07.2002 04:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
CVE-Watchlists
Login
Unerledigt
Login

Directory traversal vulnerability in Aprelium Abyss Web Server (abyssws) before 1.0.0.2 allows remote attackers to read files outside the web root, including the abyss.conf file, via URL-encoded .. (dot dot) sequences in the HTTP request.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 0 Referenzen 7

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Aprelium Technologies ≫ Abyss Web Server Version1.0

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	10.26%	0.924

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	5	10	2.9	AV:N/AC:L/Au:N/C:P/I:N/A:N

http://archives.neohapsis.com/archives/bugtraq/2002-04/0110.html

Patch

Vendor Advisory

Exploit

http://www.aprelium.com/forum/viewtopic.php?t=24

Patch

http://www.iss.net/security_center/static/8805.php

Patch

Vendor Advisory

http://www.securityfocus.com/bid/4466

Patch

Vendor Advisory

Exploit

https://nvd.nist.gov/vuln/detail/CVE-2002-0543

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2002-0543

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2002-0543

EUVD