CVE-2002-0503: Medium severity Citrix Nfuse vulnerability

Published Jun 11, 2002

Updated

Directory traversal vulnerability in boilerplate.asp for Citrix NFuse 1.5 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the NFuseTemplate parameter.

Affected Software

1 affected component

Citrix Nfuse=1.5

Remediation

Patch Available

http://www.iss.net/security_center/static/8654.php

Event History

Jun 11, 2002

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2002-0503?

The severity of CVE-2002-0503 is classified as medium due to the potential for unauthorized file access.

How do I fix CVE-2002-0503?

To fix CVE-2002-0503, ensure that Citrix NFuse is upgraded to a patched version that addresses the directory traversal vulnerability.

Who is affected by CVE-2002-0503?

CVE-2002-0503 affects users of Citrix NFuse version 1.5 who have remote authenticated access.

What exploitation methods are possible with CVE-2002-0503?

Exploitation of CVE-2002-0503 can allow attackers to read arbitrary files on the server via crafted requests.

What are the implications of CVE-2002-0503 for organizations?

Organizations with Citrix NFuse 1.5 face risks of sensitive information exposure due to the directory traversal vulnerability in CVE-2002-0503.