CVE-2002-0304

Medium

5/10

Summary

Lil HTTP Server 2.1 allows remote attackers to read password-protected files via a /./ in the HTTP request.

Access Complexity: LOW
AccessVector: NETWORK
Authentication: NONE
Integrity Impact: NONE
Confidentiality Impact: PARTIAL
Availability Impact: NONE

References

Advisory Timeline

Published May 31, 2002