CVE-2002-0307 | BDVDB-2026-4017 Detail

Description#

Directory traversal vulnerability in ans.pl in Avenger's News System (ANS) 2.11 and earlier allows remote attackers to determine the existence of arbitrary files or execute any Perl program on the system via a .. (dot dot) in the p parameter, which reads the target file and attempts to execute the line using Perl's eval function.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.securityfocus.com/bid/4147
http://marc.info/?l=bugtraq&m=101430868616112&w=2

Exploit#

No public exploit known

History#

Version 12002-05-03Record published in the CVE List.
Version 22024-08-08Most recent update recorded in the CVE List.