CVE-2002-0708

Directory traversal vulnerability in the Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to read arbitrary files via an HTTP request containing ... (triple dot) sequences.

CVSS v2.0 5.0 MEDIUM

5.0^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References

Link	Resource
http://marc.info/?l=bugtraq&m=103359690824103&w=2
http://www.iss.net/security_center/static/10244.php
http://www.securityfocus.com/bid/5857

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:surfcontrol:superscout_web_filter:3.0:::::::*
	cpe:2.3:a:surfcontrol:superscout_web_filter:3.0.3:::::::*
	cpe:2.3:a:surfcontrol:web_filter:4.0:::::::*
	cpe:2.3:a:surfcontrol:web_filter:4.1:::::::*

History

No history.

Information

Published : 2002-10-10 04:00

Updated : 2016-10-18 02:21

NVD link : CVE-2002-0708

Mitre link : CVE-2002-0708

CVE.ORG link : CVE-2002-0708

JSON object : View

Products Affected

surfcontrol

superscout_web_filter
web_filter

CWE

NVD-CWE-Other

{"id": "CVE-2002-0708", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 5.0, "accessVector": "NETWORK", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "authentication": "NONE", "integrityImpact": "NONE", "accessComplexity": "LOW", "availabilityImpact": "NONE", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 10.0, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": false}]}, "published": "2002-10-10T04:00:00.000", "references": [{"url": "http://marc.info/?l=bugtraq&m=103359690824103&w=2", "source": "cve@mitre.org"}, {"url": "http://www.iss.net/security_center/static/10244.php", "source": "cve@mitre.org"}, {"url": "http://www.securityfocus.com/bid/5857", "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "NVD-CWE-Other"}]}], "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in the Web Reports Server for SurfControl SuperScout WebFilter allows remote attackers to read arbitrary files via an HTTP request containing ... (triple dot) sequences."}, {"lang": "es", "value": "Vulnerabilidad de Atravesamiento de directorios en los Servidores Web de Informes para SurfControl SuperScout WebFilter que permite a los atantes la lectura arbitraria de ficheros v\u00eda peticiones HTTP que contengan la secuencia \"...\" (tres puntos)"}], "lastModified": "2016-10-18T02:21:38.443", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:surfcontrol:superscout_web_filter:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "00357092-1EB0-47E0-8F58-6E40D26DCD68"}, {"criteria": "cpe:2.3:a:surfcontrol:superscout_web_filter:3.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E4D1AD52-6B1F-453E-8C01-730B229FF97A"}, {"criteria": "cpe:2.3:a:surfcontrol:web_filter:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "94D2D054-356F-469B-A30B-7583FDBC08B9"}, {"criteria": "cpe:2.3:a:surfcontrol:web_filter:4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "65AAA83F-B6AA-4E48-9AF6-BC2E5AB89DCA"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}