Lucene search
HistoryAug 12, 2002 - 4:00 a.m.
CVE-2002-0773
cve-2002-0773
imp_rootdir.asp
hosting controller
remote attackers
file copy
file delete
parameter modification
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.021 Low
EPSS
Percentile
89.2%
imp_rootdir.asp for Hosting Controller allows remote attackers to copy or delete arbitrary files and directories via a direct request to imp_rootdir.asp and modifying parameters such as (1) ftp, (2) owwwPath, and (3) oftpPath.
Affected configurations
Node
hosting_controllerhosting_controllerMatch1.1
ORhosting_controllerhosting_controllerMatch1.3
ORhosting_controllerhosting_controllerMatch1.4
ORhosting_controllerhosting_controllerMatch1.4.1
ORhosting_controllerhosting_controllerMatch1.4b
10 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
7.2 High
AI Score
Confidence
Low
0.021 Low
EPSS
Percentile
89.2%
Related for CVE-2002-0773