CVE-2002-1039 Directory traversal vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to read arbitrary files via .. (dot dot) sequences when downloading files from the Projects: Attac...
MediumCVSS 5.0
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Double Choco Latte (DCL) before 20020706 allows remote attackers to read arbitrary files via .. (dot dot) sequences when downloading files from the Projects: Attachments feature.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| michael dean double choco latte | = 2002-01-20 | No fix listed |
| michael dean double choco latte | = 2002-02-15 | No fix listed |
References
- 20020714 [VulnWatch] Double Choco Latte multiple vulnerabilities mailing-list
- dcl.sourceforge.net
- 20020714 Double Choco Latte multiple vulnerabilities mailing-list
- dcl-dotdot-directory-traversal(9743) patch vdb-entry vendor-advisory
- Debian Security Tracker CVE-2002-1039 vendor-advisory