CVE-2004-2640 | BDVDB-2026-13782 Detail

Description#

Directory traversal vulnerability in lstat.cgi in LinuxStat before 2.3.1 allows remote attackers to read arbitrary files via (1) .. (dot dot) sequences or (2) absolute paths to the template parameter.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://exchange.xforce.ibmcloud.com/vulnerabilities/17833
http://sourceforge.net/project/shownotes.php?release_id=277371
http://www.securityfocus.com/bid/11517
http://securitytracker.com/id?1011920
http://www.osvdb.org/11103
http://secunia.com/advisories/12963

Exploit#

No public exploit known

History#

Version 12005-12-04Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.