Vulnerability in Astaware Searchdisc
CVE-2002-1525
Directory traversal vulnerability in ASTAware SearchDisk engine for Sun ONE Starter Kit 2.0 allows remote attackers to read arbitrary files via a .. (dot dot) attack on port (1) 6015 or (2) 6016, or (3) an absolute pathname to port 6017.
EPSS: 0.081 (94.2th percentile) — read the EPSS interpretation.
Affected products
- Astaware Searchdisc — versions 3.1
- Sun Sunone_starter_kit — versions 2.0
- N/a — versions n/a
References
- cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (vdb-entry, Vendor Advisory, x_refsource_XF)