CVE-2002-2033 faqmanager.cgi in FAQManager 2.2.5 and earlier allows remote attackers to read arbitrary files by specifying the filename in the toc parameter with a trailing null character (%00).
MediumCVSS 5.0
EPSS 1.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
faqmanager.cgi in FAQManager 2.2.5 and earlier allows remote attackers to read arbitrary files by specifying the filename in the toc parameter with a trailing null character (%00).
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| faqmanager.cgi | = 2.0 | No fix listed |
| faqmanager.cgi | = 2.1 | No fix listed |
| faqmanager.cgi | = 2.1.1 | No fix listed |
| faqmanager.cgi | = 2.1.2 | No fix listed |
| faqmanager.cgi | = 2.2 | No fix listed |
| faqmanager.cgi | = 2.2.1 | No fix listed |
| faqmanager.cgi | = 2.2.2 | No fix listed |
| faqmanager.cgi | = 2.2.3 | No fix listed |
| faqmanager.cgi | = 2.2.4 | No fix listed |
| faqmanager.cgi | = 2.2.5 | No fix listed |
References
- 20020107 Faqmanager.cgi file read vulnerability mailing-list patch
- faqmanager-cgi-null-file-read(7833) patch vdb-entry
- 3810 patch vdb-entry