CVE-2002-0160

The administration function in Cisco Secure Access Control Server (ACS) for Windows, 2.6.x and earlier and 3.x through 3.01 (build 40), allows remote attackers to read HTML, Java class, and image files outside the web root via a .... (modified ..) in the URL to port 2002.

Published: Apr 22, 2002
Updated: Apr 13, 2023
CVE: CVE-2002-0160
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
cisco / secure_access_control_server	3.0.1	3.0.1.x
cisco / secure_access_control_server	2.6.2	2.6.2.x
cisco / secure_access_control_server	2.6.3	2.6.3.x
cisco / secure_access_control_server	3.0	3.0.x
cisco / secure_access_control_server	2.6.4	2.6.4.x
cisco / secure_access_control_server	2.6	2.6.x

http://marc.info/?l=bugtraq&m=101786689128667&w=2
http://www.cisco.com/warp/public/707/ACS-Win-Web.shtml
http://www.osvdb.org/5352

Vulnerability Database

289,689

CVE-2002-0160