20021113 KeyFocus KF Web Server File Disclosure Vulnerabilitymailing list
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0073.html CVE-2002-2403
Key Focus KF Web Server 1.0.8 - Directory Traversal
Record summary
CVE-2002-2403 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via "...", "....", ".....", and other multiple dot sequences.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBKey Focus KF Web Server 1.0.8 - Directory TraversalExploitDB exploitby mattmurphyNot analyzed1 file
References
73331Third-party advisory
http://securityreason.com/securityalert/3331 keyfocus-get-directory-traversal(10622)vdb entry
http://www.iss.net/security_center/static/10622.php keyfocus.netConfirmation
http://www.keyfocus.net/kfws/support 20021113 KeyFocus KF Web Server File Disclosure Vulnerabilitymailing list
http://www.securityfocus.com/archive/1/299742 6180vdb entry
http://www.securityfocus.com/bid/6180 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-2403