CVE-2001-0842

critical

Description

Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.

References

http://www.securityfocus.com/bid/3484

http://www.iss.net/security_center/static/7436.php

http://marc.info/?l=bugtraq&m=100446455809273&w=2

Details

Source: Mitre, NVD

Published: 2001-12-06

Updated: 2026-06-16

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.1

Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Severity: Critical

EPSS

EPSS: 0.02446

Detections

Analytics