CVE-2002-2416 Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL GET request.
MediumCVSS 5.0
EPSS 6.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL GET request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| zeroo http server | = 1.5 | No fix listed |
References
- 20021121 Zeroo Folder Traversal Vulnerability exploit mailing-list
- 20021122 Zeroo Folder Traversal Vulnerability exploit mailing-list
- zeroo-dotdot-directory-traversal(10672) vdb-entry
- 6308 exploit vdb-entry