CVE-2002-0261

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Directory traversal vulnerability in InstantServers MiniPortal 1.1.5 and earlier allows remote authenticated users to read arbitrary files via a ... (modified dot dot) in the GET command.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://marc.info/?l=bugtraq&m=101329397901071&w=2
http://www.instantservers.com/releases.htmlVendor Advisory
http://www.iss.net/security_center/static/8171.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/4075Patch, Vendor Advisory
http://marc.info/?l=bugtraq&m=101329397901071&w=2
http://www.instantservers.com/releases.htmlVendor Advisory
http://www.iss.net/security_center/static/8171.phpPatch, Vendor Advisory
http://www.securityfocus.com/bid/4075Patch, Vendor Advisory

Timeline

Published: May 29, 2002
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2002

CVE-2002-02625.0Directory traversal vulnerability in netget for Sybex E-Trainer web server allows remote attackers to read arbitrary files via a .. (dot dot CVE-2002-02637.5Buffer overflow in EasyBoard 2000 1.27 (aka EZboard) allows remote attackers to execute arbitrary code via a long boundary value in a multip CVE-2002-02647.5PowerFTP Personal FTP Server 2.03 through 2.10 stores sensitive account information in plaintext in the ftpserver.ini file, which allows att CVE-2002-02654.6Sawmill for Solaris 6.2.14 and earlier creates the AdminPassword file with world-writable permissions, which allows local users to gain priv CVE-2002-02665.0Thunderstone Texis CGI script allows remote attackers to obtain the full path of the web root via a request for a nonexistent file, which ge CVE-2002-026710.0preferences.php in Simple Internet Publishing System (SIPS) before 0.3.1 allows remote attackers to gain administrative privileges via a lin CVE-2002-02687.2Identix BioLogon 3 allows users with physical access to the system to gain administrative privileges by using CTRL-ALT-DEL and running a "Br CVE-2002-02697.5Internet Explorer 5.x and 6 interprets an object as an HTML document even when its MIME Content-Type is text/plain, which could allow remote CVE-2002-02704.3Opera, when configured with the "Determine action by MIME type" option disabled, interprets an object as an HTML document even when its MIME CVE-2002-02711.2Runtime library in GNU Ada compiler (GNAT) 3.12p through 3.14p allows local users to modify files of other users via a symlink attack on tem CVE-2002-027210.0Buffer overflows in mpg321 before 0.2.9 allows local and possibly remote attackers to execute arbitrary code via a long URL to (1) a command CVE-2002-02734.6Buffer overflow in CWMail.exe in NetWin before 2.8a allows remote authenticated users to execute arbitrary code via a long item parameter.