| Vulnerability Name: | CVE-2002-1982 (CCN-9530) | ||||||||
| Assigned: | 2002-07-09 | ||||||||
| Published: | 2002-07-09 | ||||||||
| Updated: | 2008-09-05 | ||||||||
| Summary: | Directory traversal vulnerability in the list_directory function in Icecast 1.3.12 allows remote attackers to determine if a directory exists via a .. (dot dot) in the GET request, which returns different error messages depending on whether the directory exists or not. | ||||||||
| CVSS v3 Severity: | 5.3 Medium (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N)
| ||||||||
| CVSS v2 Severity: | 5.0 Medium (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Obtain Information | ||||||||
| References: | Source: MITRE Type: CNA CVE-2002-1982 Source: CCN Type: Vuln-Dev Mailing List, 2002-07-09 18:39:03 VANED LABS: icecast filesystem disclosure Source: XF Type: UNKNOWN icecast-dotdot-information-disclosure(9530) Source: CCN Type: OSVDB ID: 847 Icecast Server list_directory Function Traversal File / Directory Enumeration Source: VULN-DEV Type: UNKNOWN 20020709 VANED LABS: icecast filesystem disclosure Source: BID Type: Exploit 5189 Source: CCN Type: BID-5189 Icecast Server Directory Traversal Information Disclosure Vulnerability Source: XF Type: UNKNOWN icecast-dotdot-information-disclosure(9530) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||