CVE-2002-1928 602Pro LAN SUITE 2002 allows remote attackers to view the directory tree via an HTTP GET request with a trailing "~" (tilde) or ".bak" extension.
MediumCVSS 5.0
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
602Pro LAN SUITE 2002 allows remote attackers to view the directory tree via an HTTP GET request with a trailing "~" (tilde) or ".bak" extension.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| software602 602pro lan suite | = 2002 | No fix listed |
References
- 20021018 interSEC security advisory - Multiple bugs in Web602 web server mailing-list vendor-advisory
- 602pro-get-directory-tree(10450) patch vdb-entry