CVE-2003-1463 Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to (1) determine the installation path by reading the con...
LowCVSS 3.5
EPSS 2.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Absolute path traversal vulnerability in Alt-N Technologies WebAdmin 2.0.0 through 2.0.2 allows remote attackers with administrator privileges to (1) determine the installation path by reading the contents of the Name parameter in a link, and (2) read arbitrary files via an absolute path in the Name parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| alt-n webadmin | = 2.0.0 | No fix listed |
| alt-n webadmin | = 2.0.1 | No fix listed |
| alt-n webadmin | = 2.0.2 | No fix listed |
References
- 3286 third-party-advisory
- 20030425 Path disclosure and file access on WebAdmin mailing-list
- 7438 vdb-entry
- 7439 vdb-entry
- webadmin-webadmindll-path-disclosure(11874) vdb-entry
- webadmin-webadmindll-view-files(11875) vdb-entry