← back
CVE-2002-1837

CVE-2002-1837

EPSS 2.9%
The getAlbumToDisplay function in idsShared.pm for Image Display System (IDS) 0.81 allows remote attackers to determine the existence of arbitrary directories via ".." sequences in the album parameter, which generates different error messages depending on whether the directory exists or not.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/21487unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://ids.sourceforge.net/ChangeLog.htmlhttp://online.securityfocus.com/archive/1/274433http://www.iss.net/security_center/static/9201.phphttp://www.securityfocus.com/bid/4870