Unscored severity · published Dec 31, 2002
CVE-2002-1684
Directory traversal vulnerability in (1) Deerfield D2Gfx 1.0.2 or (2) BadBlue Enterprise Edition 1.5.x and BadBlue Personal Edition 1.5.6 allows remote attackers to read arbitrary…
–
CVSS
4.9%
EPSS
No
On KEV
Description
Directory traversal vulnerability in (1) Deerfield D2Gfx 1.0.2 or (2) BadBlue Enterprise Edition 1.5.x and BadBlue Personal Edition 1.5.6 allows remote attackers to read arbitrary files via a ../ (dot dot slash) in the script used to read Microsoft Office documents.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.9% · higher than 92% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BA
Badblue · Working Resources Inc.
enterprise_1.5; personal_1.5.6_beta · source: NVD
D2
D2gfx · Deerfield
1.0.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2002-1684
CVE.org
https://www.cve.org/CVERecord?id=CVE-2002-1684
www.securityfocus.com
http://www.securityfocus.com/archive/1/251523
www.securityfocus.com
http://www.securityfocus.com/bid/3913
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/7946