PT-2002-1907 · Localweb · Localweb2000

Published 2002-10-04 · Updated 2008-09-05 · CVE-2002-0897

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions: LocalWEB2000 version 2.1.0

Description: The issue allows remote attackers to bypass access restrictions for restricted files by manipulating the URL to include the "/./" directory. This could potentially expose sensitive information.

Recommendations: For LocalWEB2000 version 2.1.0, consider restricting access to sensitive files and directories to minimize the risk of exploitation until a patch is available. As a temporary workaround, avoid using URLs that contain the "/./" directory to access restricted files.

Exploit

Fix

Related Identifiers

CVE-2002-0897

Affected Products

Localweb2000

References · 6

• 🔥 http://securityfocus.com/bid/4820 · Exploit
• 🔥 https://exploit-db.com/exploits/21475 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-0897 · Security Note
• http://iss.net/security_center/static/9165.php · Vendor Advisory
• http://archives.neohapsis.com/archives/vulnwatch/2002-q2/0079.html · Note
• http://online.securityfocus.com/archive/1/274020 · Note