CVE-2002-1031

KeyFocus KF <1.0.2 - Path Traversal

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2002-1031. PoCs published by Securiteinfo.com.

AI-analyzed exploit summary The exploit describes a directory traversal vulnerability in KF Web Server 1.0.2 where appending a null byte (%00) to a URL discloses directory contents. No actual exploit code is provided, only a description and example URLs.

Description

KeyFocus (KF) web server 1.0.2 allows remote attackers to list directories and read restricted files via an HTTP request containing a %00 (null) character.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Securiteinfo.com · textremotewindows
https://www.exploit-db.com/exploits/21597

The exploit describes a directory traversal vulnerability in KF Web Server 1.0.2 where appending a null byte (%00) to a URL discloses directory contents. No actual exploit code is provided, only a description and example URLs.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: KF Web Server 1.0.2
No auth needed
Prerequisites: Access to the target web server
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (5)

Core 5
Core References
Various Sources x_refsource_confirm
http://www.keyfocus.net/kfws/support/
Third Party Advisory mailing-list x_refsource_vulnwatch
http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0007.html
Patch, Vendor Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/9500.php
Exploit, Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/5177
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://online.securityfocus.com/archive/1/281102

Scores

EPSS 0.0804
EPSS Percentile 94.2%

Details

Status published
Products (1)
key_focus/kf_web_server 1.0.2
Published Oct 04, 2002
Tracked Since Feb 18, 2026