CVE-2003-1463

EPSS 5.43%
Veröffentlicht 31.12.2003 05:00:00
Zuletzt bearbeitet 03.04.2025 01:03:51
Quelle cve@mitre.org
Teams Watchlist Login
Unerledigt Login

Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to (1) determine the installation path by reading the contents of the Name parameter in a link, and (2) read arbitrary files via an absolute path in the Name parameter.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 9

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Alt-n ≫ Webadmin Version2.0.0

Microsoft ≫ All Windows

Alt-n ≫ Webadmin Version2.0.1

Microsoft ≫ All Windows

Alt-n ≫ Webadmin Version2.0.2

Microsoft ≫ All Windows

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	5.43%	0.898

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	3.5	6.8	2.9	AV:N/AC:M/Au:S/C:N/I:P/A:N

CWE-20 Improper Input Validation

The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

http://securityreason.com/securityalert/3286

http://www.securityfocus.com/archive/1/319735

http://www.securityfocus.com/bid/7438

http://www.securityfocus.com/bid/7439

https://exchange.xforce.ibmcloud.com/vulnerabilities/11874

https://exchange.xforce.ibmcloud.com/vulnerabilities/11875

https://nvd.nist.gov/vuln/detail/CVE-2003-1463

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2003-1463

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2003-1463

EUVD