Joe Testa hellbent 01 allows remote attackers to determine the full path of the web root directory via a GET request with a relative path that includes the root's parent, which generates a 403 error message if the parent is incorrect, but a normal response if the parent is correct.
References
| Link | Resource |
|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2002-01/0228.html | Broken Link Exploit Patch Vendor Advisory |
| http://www.iss.net/security_center/static/7930.php | Broken Link Patch |
| http://www.securityfocus.com/bid/3908 | Broken Link Patch Third Party Advisory VDB Entry |
| http://archives.neohapsis.com/archives/bugtraq/2002-01/0228.html | Broken Link Exploit Patch Vendor Advisory |
| http://www.iss.net/security_center/static/7930.php | Broken Link Patch |
| http://www.securityfocus.com/bid/3908 | Broken Link Patch Third Party Advisory VDB Entry |
Configurations
History
20 Nov 2024, 23:42
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://archives.neohapsis.com/archives/bugtraq/2002-01/0228.html - Broken Link, Exploit, Patch, Vendor Advisory | |
| References | () http://www.iss.net/security_center/static/7930.php - Broken Link, Patch | |
| References | () http://www.securityfocus.com/bid/3908 - Broken Link, Patch, Third Party Advisory, VDB Entry |
14 Feb 2024, 15:07
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-203 | |
| CPE | cpe:2.3:a:joetesta:hellbent:0.1:*:*:*:*:*:*:* | |
| First Time |
Joetesta hellbent
Joetesta |
|
| References | (BID) http://www.securityfocus.com/bid/3908 - Broken Link, Patch, Third Party Advisory, VDB Entry | |
| References | (BUGTRAQ) http://archives.neohapsis.com/archives/bugtraq/2002-01/0228.html - Broken Link, Exploit, Patch, Vendor Advisory | |
| References | (XF) http://www.iss.net/security_center/static/7930.php - Broken Link, Patch |
Information
Published : 2002-12-31 05:00
Updated : 2025-04-03 01:03
NVD link : CVE-2002-2094
Mitre link : CVE-2002-2094
CVE.ORG link : CVE-2002-2094
JSON object : View
Products Affected
joetesta
- hellbent
CWE
CWE-203
Observable Discrepancy
