CVE-2002-0325 Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the URL.
MediumCVSS 5.0
EPSS 37.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in BadBlue before 1.6.1 allows remote attackers to read arbitrary files via a ... (modified dot dot) in the URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| working resources inc badblue | = 1.5.6_beta | No fix listed |
| working resources inc badblue | = 1.6_beta | No fix listed |
References
- 20020226 BadBlue Yet Another Directory Traversal mailing-list
- badblue-dotdotdot-directory-traversal(8295) exploit patch vdb-entry vendor-advisory
- 4179 exploit patch vdb-entry vendor-advisory