Vulnerabilities > CVE-2002-0786 - Unspecified vulnerability in Critical Path Injoin Directory Server 4.0

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
critical-path
exploit available
NVD
Published: 2002-08-12
Updated: 2008-09-05

Summary

iCon administrative web server for Critical Path inJoin Directory Server 4.0 allows authenticated inJoin administrators to read arbitrary files by specifying the target file in the LOG parameter.

Vulnerable Configurations

Part Description Count
Application
Critical_Path
1

Exploit-Db

descriptionCritical Path InJoin Directory Server 4.0 File Disclosure Vulnerability. CVE-2002-0786. Remote exploits for multiple platform
idEDB-ID:21445
last seen2016-02-02
modified2002-05-10
published2002-05-10
reporterNomad Mobile Research Centre
sourcehttps://www.exploit-db.com/download/21445/
titleCritical Path InJoin Directory Server 4.0 File Disclosure Vulnerability

References