PT-2002-3115 · Keyfocus · Keyfocus Web Server

Published 2002-12-31 · Updated 2008-09-05 · CVE-2002-2403

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions KeyFocus web server version 1.0.8

Description A directory traversal issue exists, allowing remote attackers to read arbitrary files for recognized MIME type files via multiple dot sequences such as "...", "....", ".....".

Recommendations For version 1.0.8, consider restricting access to sensitive files and directories to minimize the risk of exploitation until a patch is available.

Exploit

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

CVE-2002-2403

Affected Products

Keyfocus Web Server

References · 9

• 🔥 http://securityreason.com/securityalert/3331 · Exploit
• 🔥 http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0073.html · Exploit
• 🔥 https://exploit-db.com/exploits/22018 · Exploit
• 🔥 http://securityfocus.com/archive/1/299742 · Exploit
• 🔥 http://securityfocus.com/bid/6180 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2002-2403 · Security Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2002-2403 · Note
• http://iss.net/security_center/static/10622.php · Note
• http://keyfocus.net/kfws/support · Note