CVE-2002-2375: Path Traversal
Directory traversal vulnerability in CommuniGate Pro 4.0b4 and possibly earlier versions allows remote attackers to list the contents of the WebUser directory and its parent directory via a (1) .. (dot dot) or (2) . (dot) in a URL. NOTE: it is not clear whether this issue reveals any more information regarding directory structure than is already available to any CommuniGate Pro user, although there is a possibility that it could be used to infer product version information.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2002-2375?
CVE-2002-2375 is considered a high severity vulnerability due to its potential for unauthorized access to sensitive files.
How do I fix CVE-2002-2375?
To fix CVE-2002-2375, upgrade to a version of CommuniGate Pro later than 4.0b4 that has addressed this vulnerability.
What types of attacks are possible with CVE-2002-2375?
CVE-2002-2375 allows remote attackers to execute directory traversal attacks to list contents of sensitive directories.
Which versions of CommuniGate Pro are affected by CVE-2002-2375?
CVE-2002-2375 affects CommuniGate Pro version 4.0b4 and potentially earlier versions.
Is user input validation a concern with CVE-2002-2375?
Yes, inadequate user input validation is a primary cause for the directory traversal vulnerability in CVE-2002-2375.