CVEvulnerability
CVE-2004-2640
5.0 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2004-12-31
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:P/I:N/A:N
Description
Directory traversal vulnerability in lstat.cgi in LinuxStat before 2.3.1 allows remote attackers to read arbitrary files via (1) .. (dot dot) sequences or (2) absolute paths to the template parameter.
References
- http://secunia.com/advisories/12963 Patch, Vendor Advisory
- http://securitytracker.com/id?1011920 Exploit
- http://sourceforge.net/project/shownotes.php?release_id=277371 sourceforge.net
- http://www.osvdb.org/11103 Patch
- http://www.securityfocus.com/bid/11517 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17833 exchange.xforce.ibmcloud.com
- http://secunia.com/advisories/12963 Patch, Vendor Advisory
- http://securitytracker.com/id?1011920 Exploit
- http://sourceforge.net/project/shownotes.php?release_id=277371 sourceforge.net
- http://www.osvdb.org/11103 Patch
- http://www.securityfocus.com/bid/11517 Exploit, Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/17833 exchange.xforce.ibmcloud.com