low3.5Public exploit code
CVE-2003-1463
Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to (1) determine…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Alt-N WebAdmin 2.0.x - Remote File Disclosure2003-04-25 · remote · cgi · Verified
- Alt-N WebAdmin 2.0.x - Remote File Viewing2003-04-25 · remote · cgi · Verified
Impact
Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to (1) determine the installation path by reading the contents of the Name parameter in a link, and (2) read arbitrary files via an absolute path in the Name parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Alt-N | Webadmin | Versions 2.0.0, 2.0.1, 2.0.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://securityreason.com/securityalert/3286
- http://www.securityfocus.com/archive/1/319735
- http://www.securityfocus.com/bid/7438
- http://www.securityfocus.com/bid/7439
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11874
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11875
- http://securityreason.com/securityalert/3286
- http://www.securityfocus.com/archive/1/319735
- http://www.securityfocus.com/bid/7438
- http://www.securityfocus.com/bid/7439
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11874
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11875