CVE-2002-0196

Published: May 16, 2002Modified: Apr 16, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

GetRelativePath in ACD Incorporated CwpAPI 1.1 only verifies if the server root is somewhere within the path, which could allow remote attackers to read or write files outside of the web root, in other directories whose path includes the web root.

Affected (1)

Products: Acd Incorporated: Cwpapi

Acd Incorporated

1 product

Cwpapi

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Acd Incorporated Cwpapi	Version 1.1

References (8)

http://online.securityfocus.com/archive/1/251699

Source: cve@mitre.org

http://sourceforge.net/forum/forum.php?forum_id=144966

Source: cve@mitre.org

Patch

http://www.iss.net/security_center/static/7981.php

Source: cve@mitre.org

PatchVendor Advisory

http://www.securityfocus.com/bid/3924

Source: cve@mitre.org

http://online.securityfocus.com/archive/1/251699

Source: af854a3a-2127-422b-91ae-364da2661108

http://sourceforge.net/forum/forum.php?forum_id=144966

Source: af854a3a-2127-422b-91ae-364da2661108

Patch

http://www.iss.net/security_center/static/7981.php

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://www.securityfocus.com/bid/3924

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.