CVE-2002-1837

The getAlbumToDisplay function in idsShared.pm for Image Display System (IDS) 0.81 allows remote attackers to determine the existence of arbitrary directories…

published June 28, 2005

CVSS
—
EPSS
3%
Percentile
86.9
In the wild
Unconfirmed
What it is

The getAlbumToDisplay function in idsShared.pm for Image Display System (IDS) 0.81 allows remote attackers to determine the existence of arbitrary directories via ".." sequences in the album parameter, which generates different error messages depending on whether the directory exists or not.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02940 · 86.9th percentile
Published
2005-06-28T04:00Z
EPSS history
Timeline
  • 28 JUN 04:00Z
    The getAlbumToDisplay function in idsShared.pm for Image Display System (IDS) 0.81 allows remote attackers to determine the existence of arbitrary directories…
    cvelistv5