CVE-2002-0908 Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTPS request.
MediumCVSS 5.0
EPSS 4.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTPS request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| cisco ids device manager | = 3.1.1 | No fix listed |
References
- 20020524 Cisco IDS Device Manager 3.1.1 Advisory mailing-list
- cisco-ids-directory-traversal(9174) patch vdb-entry vendor-advisory
- 4760 exploit patch vdb-entry vendor-advisory