CVE-2002-0926 Directory traversal vulnerability in Wolfram Research webMathematica 1.0.0 and 1.0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the MSPStoreID parameter.
MediumCVSS 5.0
EPSS 5.7%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Wolfram Research webMathematica 1.0.0 and 1.0.0.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the MSPStoreID parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| wolfram research webmathematica | = 4.0_amateur | No fix listed |
| wolfram research webmathematica | = 4.0_professional | No fix listed |
References
- 20020617 Directory Traversal in Wolfram Research's webMathematica mailing-list
- support.wolfram.com
- webmathematica-dot-directory-traversal(9373) patch vdb-entry vendor-advisory
- VU#664323 third-party-advisory us-government-resource
- 5035 exploit patch vdb-entry vendor-advisory