ids.sourceforge.netConfirmation
http://ids.sourceforge.net/ChangeLog.html CVE-2002-1837
Image Display System 0.8.1 - Directory Existence Disclosure
Record summary
CVE-2002-1837 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
The getAlbumToDisplay function in idsShared.pm for Image Display System (IDS) 0.81 allows remote attackers to determine the existence of arbitrary directories via ".." sequences in the album parameter, which generates different error messages depending on whether the directory exists or not.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBImage Display System 0.8.1 - Directory Existence DisclosureExploitDB exploitby isoxNot analyzed1 file
References
520020528 Information Disclosure Vulnerability in IDS 0.8xmailing list
http://online.securityfocus.com/archive/1/274433 ids-dir-existence(9201)vdb entry
http://www.iss.net/security_center/static/9201.php 4870vdb entry
http://www.securityfocus.com/bid/4870 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-1837