CVEDB API

Vulnerabilities

By Date
Known Exploited
Advanced Search

Vulnerable Software

Vendors
Products

Vulnerability Details CVE-2003-0156

Directory traversal vulnerability in Cross-Referencing Linux (LXR) allows remote attackers to read arbitrary files via .. (dot dot) sequences in the v parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.004

EPSS Ranking 60.6%

CVSS Severity

CVSS v2 Score 5.0

References

http://marc.info/?l=bugtraq&m=104739747222492&w=2
http://www.debian.org/security/2003/dsa-264
http://www.securityfocus.com/bid/7062
http://marc.info/?l=bugtraq&m=104739747222492&w=2
http://www.debian.org/security/2003/dsa-264
http://www.securityfocus.com/bid/7062

Products affected by CVE-2003-0156

Cross Referencer » Lxr » Version: 0.3

cpe:2.3:a:cross_referencer:lxr:0.3
Cross Referencer » Lxr » Version: 0.8

cpe:2.3:a:cross_referencer:lxr:0.8
Cross Referencer » Lxr » Version: 0.9

cpe:2.3:a:cross_referencer:lxr:0.9
Cross Referencer » Lxr » Version: 0.9.1

cpe:2.3:a:cross_referencer:lxr:0.9.1
Cross Referencer » Lxr » Version: 0.9.2

cpe:2.3:a:cross_referencer:lxr:0.9.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2003-0156

Products

Pricing

Contact Us