CVEvulnerability
CVE-2001-0842
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2001-12-06
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.
Affected configurations
• leoboard lb5000 (<= 1029)
References
- http://marc.info/?l=bugtraq&m=100446455809273&w=2 marc.info
- http://www.iss.net/security_center/static/7436.php www.iss.net
- http://www.securityfocus.com/bid/3484 www.securityfocus.com
- http://marc.info/?l=bugtraq&m=100446455809273&w=2 marc.info
- http://www.iss.net/security_center/static/7436.php www.iss.net
- http://www.securityfocus.com/bid/3484 www.securityfocus.com