CVE-2002-1559 Directory traversal vulnerability in ion-p.exe (aka ion-p) allows remote attackers to read arbitrary files via (1) C: (drive letter) or (2) .. (dot-dot) sequences in the page parameter.
MediumCVSS 5.0
EPSS 9.2%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in ion-p.exe (aka ion-p) allows remote attackers to read arbitrary files via (1) C: (drive letter) or (2) .. (dot-dot) sequences in the page parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| research systems inc ion script | = 1.4 | No fix listed |
References
- 20021101 ion-p.exe allows Remote File Retrieving exploit mailing-list
- 20021101 Re: ion-p.exe allows Remote File Retrieving exploit mailing-list vendor-advisory
- ion-ionp-view-files(10518) vdb-entry vendor-advisory
- 6091 exploit vdb-entry vendor-advisory