Lucene search

[email protected]CVE-2001-0805

HistoryMar 09, 2002 - 5:00 a.m.

CVE-2001-0805

2002-03-0905:00:00

[email protected]

web.nvd.nist.gov

cve-2001-0805

tarantella enterprise

directory traversal vulnerability

remote attackers

security flaw

nvd

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.024 Low

EPSS

Percentile

90.0%

JSON

Directory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to read arbitrary files via a … (dot dot) in the pg parameter.

Affected configurations

NVD

Node

tarantellatarantella_enterpriseMatch3.0

tarantellatarantella_enterpriseMatch3.01

CPENameOperatorVersion
tarantella:tarantella_enterprisetarantella tarantella enterpriseeq3.0
tarantella:tarantella_enterprisetarantella tarantella enterpriseeq3.01

CPE	Name	Operator	Version
tarantella:tarantella_enterprise	tarantella tarantella enterprise	eq	3.0
tarantella:tarantella_enterprise	tarantella tarantella enterprise	eq	3.01

References

www.securityfocus.com/archive/1/20010619150935.A5226%40tarantella.com

www.securityfocus.com/archive/1/3B2E37D0.81D9ED9D%40snosoft.com

www.securityfocus.com/bid/2890

exchange.xforce.ibmcloud.com/vulnerabilities/6723

5 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

6.7 Medium

AI Score

Confidence

Low

0.024 Low

EPSS

Percentile

90.0%

JSON

Related for CVE-2001-0805

nvd1 cvelist1 nessus1