Lucene search

MitreCVE-2002-0262

HistoryMay 29, 2002 - 4:00 a.m.

CVE-2002-0262

2002-05-2904:00:00

mitre

web.nvd.nist.gov

cve-2002-0262

netget

sybex e-trainer

vulnerability

server

security

directory traversal

remote access

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7.1

Confidence

Low

EPSS

0.003

Percentile

65.3%

JSON

Directory traversal vulnerability in netget for Sybex E-Trainer web server allows remote attackers to read arbitrary files via a … (dot dot) in the file parameter.

Affected configurations

Nvd

Node

sybexe-trainer

VendorProductVersionCPE
sybexe-trainercpe:/a:sybex:e-trainer::::

Vendor	Product	Version	CPE
sybex	e-trainer		cpe:/a:sybex:e-trainer::::

References

marc.info/?l=bugtraq&m=101344812311216&w=2

www.iss.net/security_center/static/8175.php

www.securityfocus.com/bid/4071

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7.1

Confidence

Low

EPSS

0.003

Percentile

65.3%

JSON

Related for CVE-2002-0262