CVE-2002-0446
Published Jul 26, 2002
Last updated 16 years ago
Overview
- Description
- categorie.php3 in Black Tie Project (BTP) 0.4b through 0.5b allows remote attackers to determine the absolute path of the web server via an invalid category ID (cid) parameter, which leaks the pathname in an error message.
- Source
- cve@mitre.org
- NVD status
- Analyzed
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:black_tie_project:black_tie_project:0.4b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2C3531DB-98B0-4B7F-9B5F-4DC19B2A6516"
},
{
"criteria": "cpe:2.3:a:black_tie_project:black_tie_project:0.5:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "61A21551-F263-4272-8B38-6E27F90DEE08"
},
{
"criteria": "cpe:2.3:a:black_tie_project:black_tie_project:0.5b:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "C58DADB1-DC13-42BF-9F5F-98AD0FAD3A08"
}
],
"operator": "OR"
}
]
}
]