20021121 Zeroo Folder Traversal Vulnerabilitymailing list
http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0083.html CVE-2002-2416
Zeroo HTTP Server 1.5 - Directory Traversal (1)
Record summary
CVE-2002-2416 has a selected CVSS score of 5.0; EIP currently links 2 catalogued exploits.
Description
Directory traversal vulnerability in Zeroo web server 1.5 allows remote attackers to read arbitrary files via a .. (dot dot) in a URL GET request.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 2
Proofs of concept
2Catalogued exploits
ExploitDBZeroo HTTP Server 1.5 - Directory Traversal (1)ExploitDB exploitby mikeccNot analyzed1 file
ExploitDBZeroo HTTP Server 1.5 - Directory Traversal (2)ExploitDB exploitby mattmurphyNot analyzed1 file
References
520021122 Zeroo Folder Traversal Vulnerabilitymailing list
http://cert.uni-stuttgart.de/archive/bugtraq/2002/11/msg00306.html zeroo-dotdot-directory-traversal(10672)vdb entry
http://www.iss.net/security_center/static/10672.php 6308vdb entry
http://www.securityfocus.com/bid/6308 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2002-2416