Path Traversal in Key Focus Kf Web Server
CVE-2002-2403
Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via "...", "....", ".....", and other multiple dot sequences.
Vulnerability class: Path Traversal (Directory Traversal)
EPSS: 0.027 (84.2th percentile) — read the EPSS interpretation.
Affected products
- Key_focus Kf_web_server — versions 1.0.8
- N/a — versions n/a
Weakness classification (CWE)
Public proof-of-concept exploits
References
- cve@mitre.org (mailing-list, x_refsource_VULNWATCH, Exploit)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (x_refsource_CONFIRM)
- cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ)
- cve@mitre.org (Exploit, x_refsource_SREASON, third-party-advisory)
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
Frequently asked questions
- What is CVE-2002-2403?
- CVE-2002-2403 is a vulnerability in Key Focus Kf Web Server, classified under Path Traversal. Published 2002-12-31.
- Is CVE-2002-2403 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.