Path Traversal in Key Focus Kf Web Server
CVE-2002-2403
Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via "...", "....", ".....", and other multiple dot sequences.
Vulnerability class: Path Traversal (Directory Traversal)
Published · last modified .
CVSS v2 metric
CVSS v2 base score 5.0 (Medium). Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N. This CVE predates CVSS v3 and has no v3 score from NVD.
EPSS exploit prediction
EPSS: 0.027 (85.1th percentile), scored .
Low probability of exploitation in the next 30 days, but still tracked. 85th percentile — 85.1% of CVEs in the catalogue have a lower EPSS than this one. How to read EPSS.
EPSS over last 30 days · oldest: 0.027 · newest: 0.027 · change: 0.000
Affected products
- Key Focus Kf Web Server — versions 1.0.8
Weakness classification (CWE)
Public proof-of-concept exploits
References
- archives.neohapsis.com/archives/vulnwatch/2002-q4/0073.html (mailing-list, Exploit)
- www.iss.net/security_center/static/10622.php (vdb-entry)
- www.keyfocus.net/kfws/support/
- www.securityfocus.com/archive/1/299742 (mailing-list, Exploit)
- securityreason.com/securityalert/3331 (Exploit, third-party-advisory)
- www.securityfocus.com/bid/6180 (Exploit, vdb-entry)
Frequently asked questions
- What is CVE-2002-2403?
- CVE-2002-2403 is a vulnerability in Key Focus Kf Web Server, classified under Path Traversal. Published 2002-12-31.
- Is CVE-2002-2403 known to be exploited?
- 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.