CVE-2002-1581

2004-12-0605:00:00

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

6.6

Confidence

Low

EPSS

0.016

Percentile

87.5%

JSON

Directory traversal vulnerability in nph-mr.cgi in Mailreader.com 2.3.20 through 2.3.31 allows remote attackers to view arbitrary files via … (dot dot) sequences and a null byte (%00) in the configLanguage parameter.

Affected configurations

Nvd

Node

mailreader.commailreader.comMatch2.3.20

mailreader.commailreader.comMatch2.3.21

mailreader.commailreader.comMatch2.3.22

mailreader.commailreader.comMatch2.3.23

mailreader.commailreader.comMatch2.3.24

mailreader.commailreader.comMatch2.3.25

mailreader.commailreader.comMatch2.3.26

mailreader.commailreader.comMatch2.3.27

mailreader.commailreader.comMatch2.3.28

mailreader.commailreader.comMatch2.3.29

mailreader.commailreader.comMatch2.3.30

mailreader.commailreader.comMatch2.3.31

Node

debiandebian_linuxMatch3.0

VendorProductVersionCPE
mailreader.commailreader.com2.3.20cpe:2.3:a:mailreader.com:mailreader.com:2.3.20:*:*:*:*:*:*:*
mailreader.commailreader.com2.3.21cpe:2.3:a:mailreader.com:mailreader.com:2.3.21:*:*:*:*:*:*:*
mailreader.commailreader.com2.3.22cpe:2.3:a:mailreader.com:mailreader.com:2.3.22:*:*:*:*:*:*:*
mailreader.commailreader.com2.3.23cpe:2.3:a:mailreader.com:mailreader.com:2.3.23:*:*:*:*:*:*:*
mailreader.commailreader.com2.3.24cpe:2.3:a:mailreader.com:mailreader.com:2.3.24:*:*:*:*:*:*:*
mailreader.commailreader.com2.3.25cpe:2.3:a:mailreader.com:mailreader.com:2.3.25:*:*:*:*:*:*:*
mailreader.commailreader.com2.3.26cpe:2.3:a:mailreader.com:mailreader.com:2.3.26:*:*:*:*:*:*:*
mailreader.commailreader.com2.3.27cpe:2.3:a:mailreader.com:mailreader.com:2.3.27:*:*:*:*:*:*:*
mailreader.commailreader.com2.3.28cpe:2.3:a:mailreader.com:mailreader.com:2.3.28:*:*:*:*:*:*:*
mailreader.commailreader.com2.3.29cpe:2.3:a:mailreader.com:mailreader.com:2.3.29:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
mailreader.com	mailreader.com	2.3.20	cpe:2.3:a:mailreader.com:mailreader.com:2.3.20:::::::*
mailreader.com	mailreader.com	2.3.21	cpe:2.3:a:mailreader.com:mailreader.com:2.3.21:::::::*
mailreader.com	mailreader.com	2.3.22	cpe:2.3:a:mailreader.com:mailreader.com:2.3.22:::::::*
mailreader.com	mailreader.com	2.3.23	cpe:2.3:a:mailreader.com:mailreader.com:2.3.23:::::::*
mailreader.com	mailreader.com	2.3.24	cpe:2.3:a:mailreader.com:mailreader.com:2.3.24:::::::*
mailreader.com	mailreader.com	2.3.25	cpe:2.3:a:mailreader.com:mailreader.com:2.3.25:::::::*
mailreader.com	mailreader.com	2.3.26	cpe:2.3:a:mailreader.com:mailreader.com:2.3.26:::::::*
mailreader.com	mailreader.com	2.3.27	cpe:2.3:a:mailreader.com:mailreader.com:2.3.27:::::::*
mailreader.com	mailreader.com	2.3.28	cpe:2.3:a:mailreader.com:mailreader.com:2.3.28:::::::*
mailreader.com	mailreader.com	2.3.29	cpe:2.3:a:mailreader.com:mailreader.com:2.3.29:::::::*