Vulnerabilities > CVE-2002-0415 - Directory Traversal vulnerability in Realnetworks Realplayer 6.0

047910
CVSS 1.7 - LOW
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
SINGLE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
local
low complexity
realnetworks

Summary

Directory traversal vulnerability in the web server used in RealPlayer 6.0.7, and possibly other versions, may allow local users to read files that are accessible to RealPlayer via a .. (dot dot) in an HTTP GET request to port 1275.

Vulnerable Configurations

Part Description Count
Application
Realnetworks
1