Lucene search

K
cveMitreCVE-2002-2233
HistoryOct 14, 2007 - 8:00 p.m.

CVE-2002-2233

2007-10-1420:00:00
CWE-22
mitre
web.nvd.nist.gov
24
cve-2002-2233
directory traversal
vulnerability
enceladus server suite 3.9
remote attackers
denial of service

CVSS2

8.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:P/I:P/A:C

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

62.0%

Directory traversal vulnerability in Enceladus Server Suite 3.9 allows remote attackers to list arbitrary directories and possibly cause a denial of service via “@” (at) characters in a CD (CWD) command, such as (1) "@/…", (2) "@@@/…c:", or (3) “@/…@/…”.

Affected configurations

Nvd
Node
mollensoft_softwareenceladus_server_suiteMatch3.9
VendorProductVersionCPE
mollensoft_softwareenceladus_server_suite3.9cpe:2.3:a:mollensoft_software:enceladus_server_suite:3.9:*:*:*:*:*:*:*

CVSS2

8.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:P/I:P/A:C

AI Score

7.4

Confidence

High

EPSS

0.002

Percentile

62.0%

Related for CVE-2002-2233