CVE

Id
5867  
CVE No.
CVE-2002-1483  
Status
Candidate  
Description
db4web_c and db4web_c.exe programs in DB4Web 3.4 and 3.6 allow remote attackers to read arbitrary files via an HTTP request whose argument is a filename of the form (1) C: (drive letter), (2) //absolute/path (double-slash), or (3) .. (dot-dot).  
Phase
Proposed (20030317)  
Votes
ACCEPT(2) Baker, Cole | NOOP(2) Cox, Wall  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
33035 5867 CVE-2002-1483 VULNWATCH:20020919 Advisory: File disclosure in DB4Web  View
33036 5867 CVE-2002-1483 URL:http://archives.neohapsis.com/archives/vulnwatch/2002-q3/0124.html  View
33037 5867 CVE-2002-1483 BUGTRAQ:20020917 Advisory: File disclosure in DB4Web  View
33038 5867 CVE-2002-1483 URL:http://archives.neohapsis.com/archives/bugtraq/2002-09/0197.html  View
33039 5867 CVE-2002-1483 CONFIRM:http://www.db4web.de/download/homepage/hotfix/readme_en.txt  View
33040 5867 CVE-2002-1483 XF:db4web-db4webc-directory-traversal(10123)  View
33041 5867 CVE-2002-1483 URL:http://www.iss.net/security_center/static/10123.php  View
33042 5867 CVE-2002-1483 BID:5723  View

Related JVN