CVE-2002-0417

2002-06-1104:00:00

mitre

www.cve.org

AI Score

6.7

Confidence

Low

EPSS

0.01

Percentile

83.8%

JSON

Directory traversal vulnerability in Endymion MailMan before 3.1 allows remote attackers to read arbitrary files via a … (dot dot) and a null character in the ALTERNATE_TEMPLATES parameter for various mmstdo*.cgi programs.

References

online.securityfocus.com/archive/1/259730

www.endymion.com/products/mailman/history.htm

www.iss.net/security_center/static/8357.php

www.securityfocus.com/bid/4222