CVE-2003-0599 Path traversal in n/a
An attacker can potentially access files outside the intended directory due to VFS path configuration issues in phpGroupWare.
- Exploited in the wild
- Not known
- Login needed
- Not stated
- Attackable
- Over the internet
- Victim action needed
- Not stated
- Fix
- Available
What is CVE-2003-0599?
CVE-2003-0599 is a critical path traversal vulnerability in n/a, published on 25 Jul 2003. It can be exploited over the network.
Official description
Unknown vulnerability in the Virtual File System (VFS) capability for phpGroupWare 0.9.16preRC and versions before 0.9.14.004 with unknown implications, related to the VFS path being under the web document root.
Which versions are affected by CVE-2003-0599?
It affects 1 product.
Products include Phpgroupware Phpgroupware.
How do I fix CVE-2003-0599?
Upgrade to a fixed version.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2003-0599 being exploited?
There is no known exploitation of CVE-2003-0599 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2004-2406 Other in n/a
- CVE-2004-2407 Unknown vulnerability in phpGroupWare before 0.9.14.002 has unknown attack vectors and impact, related to a "security hole" in the Setup/Config functionality.
- CVE-2001-0043 Code injection in n/a
- CVE-2010-0404 SQL injection in n/a
- CVE-2009-4415 Path traversal in n/a
Sources
Also known as GHSA-jpqw-hvvp-v47x.