Vulnerabilities > CVE-2002-0908 - Unspecified vulnerability in Cisco IDS Device Manager 3.1.1

047910
CVSS 5.0 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
PARTIAL
Integrity impact
NONE
Availability impact
NONE
network
low complexity
cisco
exploit available
NVD
Published: 2002-10-04
Updated: 2008-09-05

Summary

Directory traversal vulnerability in the web server for Cisco IDS Device Manager before 3.1.2 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTPS request.

Vulnerable Configurations

Part Description Count
Application
Cisco
1

Exploit-Db

descriptionCisco IDS Device Manager 3.1.1 Arbitrary File Read Access Vulnerability. CVE-2002-0908 . Remote exploit for hardware platform
idEDB-ID:21456
last seen2016-02-02
modified2002-05-17
published2002-05-17
reporterAndrew Lopacki
sourcehttps://www.exploit-db.com/download/21456/
titleCisco IDS Device Manager 3.1.1 - Arbitrary File Read Access Vulnerability

References