20020929 [LoWNOISE] "Get Knowledge" SunONE Starter Kit - Sun Microsystems/Astawaremailing list
http://online.securityfocus.com/archive/1/293545 CVE-2002-1525
Sun ONE Starter Kit 2.0 / ASTAware SearchDisc 3.1 - Search Engine Directory Traversal
Record summary
CVE-2002-1525 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on port (1) 6015 or (2) 6016, or (3) an absolute pathname to port 6017.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSun ONE Starter Kit 2.0 / ASTAware SearchDisc 3.1 - Search Engine Directory TraversalExploitDB exploitby ET LoWNOISENot analyzed1 file
References
4sunone-starterkit-search-traversal(10225)vdb entry
http://www.iss.net/security_center/static/10225.php 5828vdb entry
http://www.securityfocus.com/bid/5828 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-1525