CVE-2002-1411

Directory traversal vulnerability in update.dpgs in Duma Photo Gallery System (DPGS) 0.99.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the id parameter.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://archives.neohapsis.com/archives/bugtraq/2002-06/0265.html	Exploit Vendor Advisory
http://www.iss.net/security_center/static/9414.php	Vendor Advisory
http://www.securityfocus.com/bid/5081	Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2002-06/0265.html	Exploit Vendor Advisory
http://www.iss.net/security_center/static/9414.php	Vendor Advisory
http://www.securityfocus.com/bid/5081	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:duma:photo_gallery_system:0.99.4:*:*:*:*:*:*:*

History

20 Nov 2024, 23:41

Type	Values Removed	Values Added
References	~~() http://archives.neohapsis.com/archives/bugtraq/2002-06/0265.html - Exploit, Vendor Advisory~~	() http://archives.neohapsis.com/archives/bugtraq/2002-06/0265.html - Exploit, Vendor Advisory
References	~~() http://www.iss.net/security_center/static/9414.php - Vendor Advisory~~	() http://www.iss.net/security_center/static/9414.php - Vendor Advisory
References	~~() http://www.securityfocus.com/bid/5081 - Vendor Advisory~~	() http://www.securityfocus.com/bid/5081 - Vendor Advisory

Information

Published : 2003-04-11 04:00

Updated : 2024-11-20 23:41

NVD link : CVE-2002-1411

Mitre link : CVE-2002-1411

CVE.ORG link : CVE-2002-1411

JSON object : View

Products Affected

duma

photo_gallery_system

CWE

NVD-CWE-Other

{"id": "CVE-2002-1411", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2003-04-11T04:00:00.000", "references": [{"url": "http://archives.neohapsis.com/archives/bugtraq/2002-06/0265.html", "tags": ["Exploit", "Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/9414.php", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/5081", "tags": ["Vendor Advisory"], "source": "cve@mitre.org"}, {"url": "http://archives.neohapsis.com/archives/bugtraq/2002-06/0265.html", "tags": ["Exploit", "Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.iss.net/security_center/static/9414.php", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}, {"url": "http://www.securityfocus.com/bid/5081", "tags": ["Vendor Advisory"], "source": "af854a3a-2127-422b-91ae-364da2661108"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in update.dpgs in Duma Photo Gallery System (DPGS) 0.99.4 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the id parameter."}, {"lang": "es", "value": "Vulnerabilidad de cruce de directorio en update.dgps en Duma Photo Gallery System (DPGS) 0.99.4 permite que atacantes remotos lean cualquier fichero por medio de secuencias .. (punto punto) en el par\u00e1metro id."}], "lastModified": "2024-11-20T23:41:14.563", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:duma:photo_gallery_system:0.99.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "951C4D5F-B51C-40CA-89F4-513B80DCCE3A"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}