CVE-2004-2640

The CVE describes a directory traversal flaw in LinuxStat prior to 2.3.1, affecting the lstat.cgi component. An attacker can read arbitrary files by supplying (1) dot-dot sequences or (2) absolute paths to the template parameter, enabling unauthorized file access via remote input. The available d...

CVE-2004-2640

Directory traversal vulnerability in lstat.cgi in LinuxStat before 2.3.1 allows remote attackers to read arbitrary files via 1 .. dot dot sequences or 2 absolute paths to the template parameter...