CVE-2002-1581
Published Dec 6, 2004
Last updated 14 years ago
Overview
- Description
- Directory traversal vulnerability in nph-mr.cgi in Mailreader.com 2.3.20 through 2.3.31 allows remote attackers to view arbitrary files via .. (dot dot) sequences and a null byte (%00) in the configLanguage parameter.
- Source
- cve@mitre.org
- NVD status
- Modified
Social media
- Hype score
- Not currently trending
Risk scores
CVSS 2.0
- Type
- Primary
- Base score
- 5
- Impact score
- 2.9
- Exploitability score
- 10
- Vector string
- AV:N/AC:L/Au:N/C:P/I:N/A:N
Weaknesses
- nvd@nist.gov
- NVD-CWE-Other
Configurations
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:mailreader.com:mailreader.com:2.3.20:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4973BA4E-9117-44F8-86AB-087378A6CC7E"
},
{
"criteria": "cpe:2.3:a:mailreader.com:mailreader.com:2.3.21:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "204F09AB-0001-4B2F-8129-D63CBFEF0328"
},
{
"criteria": "cpe:2.3:a:mailreader.com:mailreader.com:2.3.22:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "6384049E-8303-426F-BC5F-11FC4B2C2A0A"
},
{
"criteria": "cpe:2.3:a:mailreader.com:mailreader.com:2.3.23:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "33E78F85-AC32-47D4-B7E0-CBF8183A4F5F"
},
{
"criteria": "cpe:2.3:a:mailreader.com:mailreader.com:2.3.24:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7C8C4860-B717-42BB-8162-37F8E9EA7664"
},
{
"criteria": "cpe:2.3:a:mailreader.com:mailreader.com:2.3.25:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "807B68CD-503D-4DD8-8D9E-8C5EF4A225C3"
},
{
"criteria": "cpe:2.3:a:mailreader.com:mailreader.com:2.3.26:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "38FA70B9-4498-4F97-A6B5-46A10337D98A"
},
{
"criteria": "cpe:2.3:a:mailreader.com:mailreader.com:2.3.27:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D293C206-3E79-49ED-9CC5-80631EF7D9EF"
},
{
"criteria": "cpe:2.3:a:mailreader.com:mailreader.com:2.3.28:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A6BE2D1D-826F-4647-ADB1-EE654FEB62A1"
},
{
"criteria": "cpe:2.3:a:mailreader.com:mailreader.com:2.3.29:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D160AC3B-E03D-4073-ADB3-5FC8309037E8"
},
{
"criteria": "cpe:2.3:a:mailreader.com:mailreader.com:2.3.30:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0A37F7F2-C147-4D04-83D0-421EDB1EF343"
},
{
"criteria": "cpe:2.3:a:mailreader.com:mailreader.com:2.3.31:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "19CC1D27-027D-4032-B9CC-CD41ED085FD0"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:o:debian:debian_linux:3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2CAE037F-111C-4A76-8FFE-716B74D65EF3"
}
],
"operator": "OR"
}
]
}
]