CVE-2002-1525 : Detail

CVE-2002-1525

0.77%V3
Network
2003-03-18
04h00 +00:00
2003-03-21
09h00 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on port (1) 6015 or (2) 6016, or (3) an absolute pathname to port 6017.

CVE Informations

Metrics

Metrics Score Severity CVSS Vector Source
V2 5 AV:N/AC:L/Au:N/C:P/I:N/A:N [email protected]

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Exploit information

Exploit Database EDB-ID : 21879

Publication date : 2002-09-29 22h00 +00:00
Author : ET LoWNOISE
EDB Verified : Yes

source: https://www.securityfocus.com/bid/5828/info A vulnerability has been reported for the Sun ONE Starter Kit 2.0 and ASTAware SearchDisc. The Starter Kit includes a search engine facility provided for easy information retrieval. The search engine included with the Starter Kit is a modified version of ASTAWare SearchDisc. Reportedly, the search engine is vulnerable to directory traversal attacks. An attacker can use the information obtained through this manner to launch potentially destructive attacks against a vulnerable system. This vulnerability affects both the Sun ONE Starter Kit and ASTAware SearchDisc. http://target:6015/../../../../../ http://target:6016/../../../../../ http://SearchDisk:6017/etc/Password http://SearchDisk:6017/etc/Root

Products Mentioned

Configuraton 0

Astaware>>Searchdisc >> Version 3.1

    Sun>>Sunone_starter_kit >> Version 2.0

      References

      http://online.securityfocus.com/archive/1/293545
      Tags : mailing-list, x_refsource_BUGTRAQ
      http://www.securityfocus.com/bid/5828
      Tags : vdb-entry, x_refsource_BID