CVE-2002-0331 Directory traversal vulnerability in the HTTP server for BPM Studio Pro 4.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request.
MediumCVSS 5.0
EPSS 2.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in the HTTP server for BPM Studio Pro 4.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alcatech gmbh bpm studio pro | = 4.2 | No fix listed |
References
- 20020227 BPM STUDIO PRO 4.2 DIRECTORY ESCAPE VULNERABILITY mailing-list
- bpm-http-directory-traversal(8300) exploit vdb-entry vendor-advisory
- 4198 vdb-entry