Joe Testa hellbent 01 allows remote attackers to determine the full path of the web root directory via a GET request with a relative path that includes the root's parent, which generates a 403 error message if the parent is incorrect, but a normal response if the parent is correct.
References
Link | Resource |
---|---|
http://archives.neohapsis.com/archives/bugtraq/2002-01/0228.html | Broken Link Exploit Patch Vendor Advisory |
http://www.iss.net/security_center/static/7930.php | Broken Link Patch |
http://www.securityfocus.com/bid/3908 | Broken Link Patch Third Party Advisory VDB Entry |
http://archives.neohapsis.com/archives/bugtraq/2002-01/0228.html | Broken Link Exploit Patch Vendor Advisory |
http://www.iss.net/security_center/static/7930.php | Broken Link Patch |
http://www.securityfocus.com/bid/3908 | Broken Link Patch Third Party Advisory VDB Entry |
Configurations
History
20 Nov 2024, 23:42
Type | Values Removed | Values Added |
---|---|---|
References | () http://archives.neohapsis.com/archives/bugtraq/2002-01/0228.html - Broken Link, Exploit, Patch, Vendor Advisory | |
References | () http://www.iss.net/security_center/static/7930.php - Broken Link, Patch | |
References | () http://www.securityfocus.com/bid/3908 - Broken Link, Patch, Third Party Advisory, VDB Entry |
14 Feb 2024, 15:07
Type | Values Removed | Values Added |
---|---|---|
CWE | CWE-203 | |
First Time |
Joetesta hellbent
Joetesta |
|
CPE | cpe:2.3:a:joetesta:hellbent:0.1:*:*:*:*:*:*:* | |
References | () http://archives.neohapsis.com/archives/bugtraq/2002-01/0228.html - Broken Link, Exploit, Patch, Vendor Advisory | |
References | () http://www.iss.net/security_center/static/7930.php - Broken Link, Patch | |
References | () http://www.securityfocus.com/bid/3908 - Broken Link, Patch, Third Party Advisory, VDB Entry |
Information
Published : 2002-12-31 05:00
Updated : 2025-04-03 01:03
NVD link : CVE-2002-2094
Mitre link : CVE-2002-2094
CVE.ORG link : CVE-2002-2094
JSON object : View
Products Affected
joetesta
- hellbent
CWE
CWE-203
Observable Discrepancy