Lucene search
HistoryNov 01, 2007 - 5:00 p.m.
CVE-2002-2403
cve-2002-2403
directory traversal
keyfocus web server
remote attackers
arbitrary files
nvd
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7.2 High
AI Score
Confidence
Low
0.027 Low
EPSS
Percentile
90.5%
Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via “…”, “…”, “…”, and other multiple dot sequences.
Affected configurations
Node
key_focuskf_web_serverMatch1.0.8
| CPE | Name | Operator | Version |
|---|---|---|---|
| key_focus:kf_web_server | key focus kf web server | eq | 1.0.8 |
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
7.2 High
AI Score
Confidence
Low
0.027 Low
EPSS
Percentile
90.5%
Related for CVE-2002-2403