CVE-2002-0354 - security flaw

Back Back to CVE browser

MEDIUM

security flaw

Published May 3, 2002

5.0

MEDIUM

CVSS 2.0

EPSS 1.04%

Description

The XMLHttpRequest object (XMLHTTP) in Netscape 6.1 and Mozilla 0.9.7 allows remote attackers to read arbitrary files and list directories on a client system by opening a URL that redirects the browser to the file on the client, then reading the result using the responseText property.

Affected products

Red Hat Linux 7.2

n/a

Fixed · RHSA-2002:079
Red Hat Linux 7.3

n/a

Fixed · RHSA-2002:079

Product	Package	State	Advisory
Red Hat Linux 7.2	n/a	Fixed	RHSA-2002:079
Red Hat Linux 7.3	n/a	Fixed	RHSA-2002:079

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (7)

http://marc.info/?l=bugtraq&m=102017952204097&w=2
mailing-listx_refsource_BUGTRAQ
http://marc.info/?l=ntbugtraq&m=102020343728766&w=2
mailing-listx_refsource_NTBUGTRAQ
https://access.redhat.com/security/cve/CVE-2002-0354
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1616762
Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2002-0351
Advisory
https://nvd.nist.gov/vuln/detail/CVE-2002-0354
https://www.cve.org/CVERecord?id=CVE-2002-0354

Link	Providers	Tags
http://marc.info/?l=bugtraq&m=102017952204097&w=2		mailing-listx_refsource_BUGTRAQ
http://marc.info/?l=ntbugtraq&m=102020343728766&w=2		mailing-listx_refsource_NTBUGTRAQ
https://access.redhat.com/security/cve/CVE-2002-0354		Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=1616762		Issue Tracking
https://euvd.enisa.europa.eu/vulnerability/EUVD-2002-0351		Advisory
https://nvd.nist.gov/vuln/detail/CVE-2002-0354
https://www.cve.org/CVERecord?id=CVE-2002-0354