CVE-2004-2127 - Vulnerability Details - OpenCVE

Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file variable.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Leif M. Wright	Web Blog

Configuration 1 [-]

cpe:2.3:a:leif_m._wright:web_blog:1.1:*:*:*:*:*:*:*

No data.

References

Link	Providers
http://marc.info/?l=bugtraq&m=107531194527602&w=2
http://secunia.com/advisories/10740
http://www.osvdb.org/3739
http://www.securityfocus.com/bid/9517
http://www.zone-h.org/en/advisories/read/id=3822/
https://exchange.xforce.ibmcloud.com/vulnerabilities/14978

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2005-05-27T04:00:00

Updated: 2024-08-08T01:15:01.590Z

Reserved: 2005-05-27T00:00:00

Link: CVE-2004-2127

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2004-01-20T05:00:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2004-2127

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2004-01-28T00:00:00", "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file variable."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-10T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20040128 ZH2004-01SA (security advisory): Web Blog 1.1 Remote arbitrary", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://marc.info/?l=bugtraq&m=107531194527602&w=2"}, {"name": "10740", "tags": ["third-party-advisory", "x_refsource_SECUNIA"], "url": "http://secunia.com/advisories/10740"}, {"name": "9517", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/9517"}, {"name": "webblog-dotdot-directory-traversal(14978)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/14978"}, {"tags": ["x_refsource_MISC"], "url": "http://www.zone-h.org/en/advisories/read/id=3822/"}, {"name": "3739", "tags": ["vdb-entry", "x_refsource_OSVDB"], "url": "http://www.osvdb.org/3739"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2004-2127", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file variable."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20040128 ZH2004-01SA (security advisory): Web Blog 1.1 Remote arbitrary", "refsource": "BUGTRAQ", "url": "http://marc.info/?l=bugtraq&m=107531194527602&w=2"}, {"name": "10740", "refsource": "SECUNIA", "url": "http://secunia.com/advisories/10740"}, {"name": "9517", "refsource": "BID", "url": "http://www.securityfocus.com/bid/9517"}, {"name": "webblog-dotdot-directory-traversal(14978)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/14978"}, {"name": "http://www.zone-h.org/en/advisories/read/id=3822/", "refsource": "MISC", "url": "http://www.zone-h.org/en/advisories/read/id=3822/"}, {"name": "3739", "refsource": "OSVDB", "url": "http://www.osvdb.org/3739"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T01:15:01.590Z"}, "title": "CVE Program Container", "references": [{"name": "20040128 ZH2004-01SA (security advisory): Web Blog 1.1 Remote arbitrary", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=107531194527602&w=2"}, {"name": "10740", "tags": ["third-party-advisory", "x_refsource_SECUNIA", "x_transferred"], "url": "http://secunia.com/advisories/10740"}, {"name": "9517", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/9517"}, {"name": "webblog-dotdot-directory-traversal(14978)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/14978"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.zone-h.org/en/advisories/read/id=3822/"}, {"name": "3739", "tags": ["vdb-entry", "x_refsource_OSVDB", "x_transferred"], "url": "http://www.osvdb.org/3739"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2004-2127", "datePublished": "2005-05-27T04:00:00", "dateReserved": "2005-05-27T00:00:00", "dateUpdated": "2024-08-08T01:15:01.590Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:leif_m._wright:web_blog:1.1:*:*:*:*:*:*:*", "matchCriteriaId": "42CF0335-87F5-4789-90DB-CC44F99B5745", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Directory traversal vulnerability in Web Blog 1.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the file variable."}], "id": "CVE-2004-2127", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2004-01-20T05:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://marc.info/?l=bugtraq&m=107531194527602&w=2"}, {"source": "cve@mitre.org", "url": "http://secunia.com/advisories/10740"}, {"source": "cve@mitre.org", "url": "http://www.osvdb.org/3739"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Patch", "Vendor Advisory"], "url": "http://www.securityfocus.com/bid/9517"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Patch", "Vendor Advisory"], "url": "http://www.zone-h.org/en/advisories/read/id=3822/"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/14978"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://marc.info/?l=bugtraq&m=107531194527602&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://secunia.com/advisories/10740"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.osvdb.org/3739"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Patch", "Vendor Advisory"], "url": "http://www.securityfocus.com/bid/9517"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Patch", "Vendor Advisory"], "url": "http://www.zone-h.org/en/advisories/read/id=3822/"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/14978"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}