medium5.0Public exploit code
CVE-2002-2403
Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via "...", "...."…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Key Focus KF Web Server 1.0.8 - Directory Traversal2002-11-13 · remote · windows · Verified
Impact
Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via "...", "....", ".....", and other multiple dot sequences.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Key Focus | Kf Web Server | Version 1.0.8 |
Weakness classification
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0073.html
- http://securityreason.com/securityalert/3331
- http://www.iss.net/security_center/static/10622.php
- http://www.keyfocus.net/kfws/support/
- http://www.securityfocus.com/archive/1/299742
- http://www.securityfocus.com/bid/6180
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0073.html
- http://securityreason.com/securityalert/3331
- http://www.iss.net/security_center/static/10622.php
- http://www.keyfocus.net/kfws/support/
- http://www.securityfocus.com/archive/1/299742
- http://www.securityfocus.com/bid/6180