Lucene search
HistoryMar 24, 2003 - 5:00 a.m.
CVE-2003-0156
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.6 Medium
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.1%
Directory traversal vulnerability in Cross-Referencing Linux (LXR) allows remote attackers to read arbitrary files via … (dot dot) sequences in the v parameter.
Affected configurations
Node
cross_referencerlxrMatch0.3
ORcross_referencerlxrMatch0.8
ORcross_referencerlxrMatch0.9
ORcross_referencerlxrMatch0.9.1
ORcross_referencerlxrMatch0.9.2
Related
nessus
nessus
Debian DSA-264-1 : lxr - missing filename sanitizing
2004-09-29 00:00:00
openvas
openvas
Debian Security Advisory DSA 264-1 (lxr)
2008-01-17 00:00:00
Debian: Security Advisory (DSA-264)
2008-01-17 00:00:00
cve
cve
CVE-2003-0156
2003-03-24 05:00:00
osv
osv
lxr - missing filename sanitizing
2003-03-19 00:00:00
cvelist
cvelist
CVE-2003-0156
2003-03-21 05:00:00
5 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
6.6 Medium
AI Score
Confidence
Low
0.012 Low
EPSS
Percentile
85.1%
Related for NVD:CVE-2003-0156