CVEvulnerability
CVE-2002-2403
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2002-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:P/A:N
- Weaknesses
- CWE-22
Description
Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via "...", "....", ".....", and other multiple dot sequences.
Affected configurations
• key focus kf web server 1.0.8
Related
Weakness · CWE (1)
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory weakness
References
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0073.html Exploit
- http://securityreason.com/securityalert/3331 Exploit
- http://www.iss.net/security_center/static/10622.php www.iss.net
- http://www.keyfocus.net/kfws/support/ www.keyfocus.net
- http://www.securityfocus.com/archive/1/299742 Exploit
- http://www.securityfocus.com/bid/6180 Exploit
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0073.html Exploit
- http://securityreason.com/securityalert/3331 Exploit
- http://www.iss.net/security_center/static/10622.php www.iss.net
- http://www.keyfocus.net/kfws/support/ www.keyfocus.net
- http://www.securityfocus.com/archive/1/299742 Exploit
- http://www.securityfocus.com/bid/6180 Exploit