Lucene search

[email protected]CVE-2002-0775

HistoryAug 12, 2002 - 4:00 a.m.

CVE-2002-0775

2002-08-1204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2002-0775

hosting controller

remote attackers

arbitrary directories

7.6 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.017 Low

EPSS

Percentile

87.8%

JSON

browse.asp in Hosting Controller allows remote attackers to view arbitrary directories by specifying the target pathname in the FilePath parameter.

CPENameOperatorVersion
hosting_controller:hosting_controllerhosting controllereq1.1
hosting_controller:hosting_controllerhosting controllereq1.3
hosting_controller:hosting_controllerhosting controllereq1.4b
hosting_controller:hosting_controllerhosting controllereq1.4.1
hosting_controller:hosting_controllerhosting controllereq1.4

CPE	Name	Operator	Version
hosting_controller:hosting_controller	hosting controller	eq	1.1
hosting_controller:hosting_controller	hosting controller	eq	1.3
hosting_controller:hosting_controller	hosting controller	eq	1.4b
hosting_controller:hosting_controller	hosting controller	eq	1.4.1
hosting_controller:hosting_controller	hosting controller	eq	1.4

References

archives.neohapsis.com/archives/bugtraq/2002-05/0168.html

hostingcontroller.com/english/logs/sp2log.html

www.hostingcontroller.com/english/patches/ForAll/download/drivebrowse.zip

7.6 High

AI Score

Confidence

Low

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

0.017 Low

EPSS

Percentile

87.8%

JSON

Related for CVE-2002-0775

cvelist1