CVE-2004-2640

Severity: medium (CVSS 5.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 8.1% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

Directory traversal vulnerability in lstat.cgi in LinuxStat before 2.3.1 allows remote attackers to read arbitrary files via (1) .. (dot dot) sequences or (2) absolute paths to the template parameter.

References

http://secunia.com/advisories/12963
http://securitytracker.com/id?1011920
http://sourceforge.net/project/shownotes.php?release_id=277371
http://www.osvdb.org/11103
http://www.securityfocus.com/bid/11517
https://exchange.xforce.ibmcloud.com/vulnerabilities/17833
http://secunia.com/advisories/12963
http://securitytracker.com/id?1011920
http://sourceforge.net/project/shownotes.php?release_id=277371
http://www.osvdb.org/11103
http://www.securityfocus.com/bid/11517
https://exchange.xforce.ibmcloud.com/vulnerabilities/17833

Get alerted when CVE-2004-2640 or the next vulnerability affects your stack