CVE-2002-2403 Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via "...", "....", ".....", and other multiple dot sequenc...
MediumCVSS 5.0
EPSS 2.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via "...", "....", ".....", and other multiple dot sequences.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| key focus kf web server | = 1.0.8 | No fix listed |
References
- 20021113 KeyFocus KF Web Server File Disclosure Vulnerability exploit mailing-list
- 3331 exploit third-party-advisory
- keyfocus-get-directory-traversal(10622) vdb-entry
- www.keyfocus.net
- 20021113 KeyFocus KF Web Server File Disclosure Vulnerability exploit mailing-list
- 6180 exploit vdb-entry