Lucene search

MitreCVE-2002-2416

HistoryNov 01, 2007 - 5:00 p.m.

CVE-2002-2416

2007-11-0117:00:00

CWE-22

mitre

web.nvd.nist.gov

vulnerability

zeroo

web server

directory traversal

remote attackers

url

get request

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.013

Percentile

86.1%

JSON

Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a … (dot dot) in a URL GET request.

Affected configurations

Nvd

Node

zeroohttp_serverMatch1.5

VendorProductVersionCPE
zeroohttp_server1.5cpe:2.3:a:zeroo:http_server:1.5:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
zeroo	http_server	1.5	cpe:2.3:a:zeroo:http_server:1.5:::::::*

References

archives.neohapsis.com/archives/vulnwatch/2002-q4/0083.html

cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00306.html

www.iss.net/security_center/static/10672.php

www.securityfocus.com/bid/6308

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:N/I:P/A:N

AI Score

7.1

Confidence

Low

EPSS

0.013

Percentile

86.1%

JSON

Related for CVE-2002-2416