CVE-2002-2158

Published: Dec 31, 2002Modified: Apr 16, 2026

5.0

Vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability: 10.0 / Impact: 2.9

Source: NVD

Description

zenTrack 2.0.3 and earlier allows remote attackers to obtain the full path to the web root via an invalid ticket ID, which leaks the path in an error message.

Affected (3)

Products: Zendocs: Zentrack

Zendocs

1 product

Zentrack

Configuration A

3 vulnerable

Vulnerable Software	Affected Versions
Zendocs Zentrack	Version 2.0.1c_beta
Zendocs Zentrack	Version 2.0.2c_beta
Zendocs Zentrack	Version 2.0.3

References (6)

http://online.securityfocus.com/archive/1/276121

Source: cve@mitre.org

http://www.iss.net/security_center/static/9312.php

Source: cve@mitre.org

http://www.securityfocus.com/bid/4973

Source: cve@mitre.org

http://online.securityfocus.com/archive/1/276121

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.iss.net/security_center/static/9312.php

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/4973

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.