CVE-2002-1525 Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on port (1) 6015 or (2) 6016, or (...
MediumCVSS 5.0
EPSS 8.1%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on port (1) 6015 or (2) 6016, or (3) an absolute pathname to port 6017.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| astaware searchdisc | = 3.1 | No fix listed |
| sunone starter kit | = 2.0 | No fix listed |
References
- 20020929 [LoWNOISE] "Get Knowledge" SunONE Starter Kit - Sun Microsystems/Astaware exploit mailing-list vendor-advisory
- sunone-starterkit-search-traversal(10225) vdb-entry vendor-advisory
- 5828 exploit vdb-entry vendor-advisory