Lucene search
HistoryJul 26, 2002 - 4:00 a.m.
CVE-2002-0446
btp
black tie project
categorie.php3
web server path exposure
remote attack
cve-2002-0446
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.1 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.6%
categorie.php3 in Black Tie Project (BTP) 0.4b through 0.5b allows remote attackers to determine the absolute path of the web server via an invalid category ID (cid) parameter, which leaks the pathname in an error message.
Affected configurations
Node
black_tie_projectblack_tie_projectMatch0.4b
ORblack_tie_projectblack_tie_projectMatch0.5
ORblack_tie_projectblack_tie_projectMatch0.5b
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
7.1 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
71.6%
Related for CVE-2002-0446