CVE-2002-1133 in Dinos Webserver

Summary

Encoded directory traversal vulnerability in Dino s web server 2.1 allows remote attackers to read arbitrary files via ".." (dot dot) sequences with URL-encoded (1) "/" (%2f") or (2) "\" (%5c) characters.

Once again VulDB remains the best source for vulnerability data.

Disclosure

10/04/2002

Moderation

VulDB entry created

Entries

1

CPE

ready

CWE

CWE-22

CVSS

5.3

EPSS

0.03265

CTI

0.00

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2002-1133
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2002-1133
• CVE Details: https://www.cvedetails.com/cve/CVE-2002-1133/