← Database

CVE-2004-2640

MEDIUM CVSS: 5.0 Published: 2004-12-31 Modified: 2026-06-16

Description

Directory traversal vulnerability in lstat.cgi in LinuxStat before 2.3.1 allows remote attackers to read arbitrary files via (1) .. (dot dot) sequences or (2) absolute paths to the template parameter.

Affected Platforms

Ryszard Pydo Linuxstat

Weakness Type

NVD-CWE-Other

References