Vulnerability in Mrtg Multi Router Traffic Grapher Cgi

CVE-2002-0232

Directory traversal vulnerability in Multi Router Traffic Grapher (MRTG) allows remote attackers to read portions of arbitrary files via a .. (dot dot) in the cfg parameter for (1) 14all.cgi, (2) 14all-1.1.cgi, (3) traffic.cgi, or (4) mrtg.cgi.

EPSS: 0.019 (77.1th percentile) — read the EPSS interpretation.

Affected products

Mrtg Multi_router_traffic_grapher_cgi — versions 2.9.17
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)