Unscored CVE-2002-2144 EUVD-2002-2123GHSA-x358-wm7h-p4j2

Directory traversal vulnerability in BearShare 4.0.5 and 4.0.6 allows remote attackers to read files outside of the web root by hex-encodin…

Published Nov 16, 2005 · Updated Sep 16, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in BearShare 4.0.5 and 4.0.6 allows remote attackers to read files outside of the web root by hex-encoding the "/" (forward slash) or "." (dot) characters.

References

5888 vdb-entry
bearshare-encoded-directory-traversal(10240) vdb-entry
20021003 BearShare Directory Traversal Issue Resurfaces mailing-list