CVE-2002-2095 Path traversal in n/a
Attackers can read sensitive files by creating similar filenames in the web root, exposing configuration data.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2002-2095?
CVE-2002-2095 is a medium-severity path traversal vulnerability in n/a, published on 5 Aug 2005. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Joe Testa hellbent 01 webserver allows attackers to read files that are specified in the hellbent.prefs file by creating a file with a similar name in the web root, as demonstrated using (1) index.webroot and (2) index.ipallow.
Which versions are affected by CVE-2002-2095?
It affects 1 product.
Products include Joe Testa Hellbent.
How do I fix CVE-2002-2095?
No fix has been published for CVE-2002-2095 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2002-2095 being exploited?
There is no known exploitation of CVE-2002-2095 in the wild and no public exploit code.
Sources
Also known as GHSA-497q-g5jr-qr43.