CVE-2004-2640

Directory traversal vulnerability in lstat.cgi in LinuxStat before 2.3.1 allows remote attackers to read arbitrary files via (1) .. (dot dot) sequences or (2) absolute paths to the template parameter.

CVSS Metrics

GitHub Security Advisory GHSA-rqvp-h98w-9g7q

Directory traversal vulnerability in lstat.cgi in LinuxStat before 2.3.1 allows remote attackers...

References (12)

• http://secunia.com/advisories/12963 Patch, Vendor Advisory
• http://securitytracker.com/id?1011920 Exploit
• http://sourceforge.net/project/shownotes.php?release_id=277371
• http://www.osvdb.org/11103 Patch
• http://www.securityfocus.com/bid/11517 Exploit, Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17833
• http://secunia.com/advisories/12963 Patch, Vendor Advisory
• http://securitytracker.com/id?1011920 Exploit
• http://sourceforge.net/project/shownotes.php?release_id=277371
• http://www.osvdb.org/11103 Patch
• http://www.securityfocus.com/bid/11517 Exploit, Patch
• https://exchange.xforce.ibmcloud.com/vulnerabilities/17833