What’s Vulnerable › Vulnerabilities

CVE-2002-2403

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.7% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2002-12-31 · updated 2026-06-16
• Weakness: CWE-22

Description

Directory traversal vulnerability in KeyFocus web server 1.0.8 allows remote attackers to read arbitrary files for recognized MIME type files via "...", "....", ".....", and other multiple dot sequences.

Affected products

• Key Focus Kf Web Server: 1.0.8

References

• http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0073.html
• http://securityreason.com/securityalert/3331
• http://www.iss.net/security_center/static/10622.php
• http://www.keyfocus.net/kfws/support/
• http://www.securityfocus.com/archive/1/299742
• http://www.securityfocus.com/bid/6180
• http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0073.html
• http://securityreason.com/securityalert/3331
• http://www.iss.net/security_center/static/10622.php
• http://www.keyfocus.net/kfws/support/
• http://www.securityfocus.com/archive/1/299742
• http://www.securityfocus.com/bid/6180

Get alerted when CVE-2002-2403 or the next vulnerability affects your stack