CVE-2004-2640

Description

Directory traversal vulnerability in lstat.cgi in LinuxStat before 2.3.1 allows remote attackers to read arbitrary files via (1) .. (dot dot) sequences or (2) absolute paths to the template parameter.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/17833

http://www.osvdb.org/11103

http://sourceforge.net/project/shownotes.php?release_id=277371

http://secunia.com/advisories/12963

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS