CVE-2002-2094
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2002-2094
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Joe Testa hellbent 01 allows remote attackers to determine the full path of the web root directory via a GET request with a relative path that includes the root's parent, which generates a 403 error message if the parent is incorrect, but a normal response if the parent is correct.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Joe Testa hellbent可利用相对路径猜测Web安装目录漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
hellbent是一个由Joe Testa维护的Java服务器程序。 hellbent实现上存在问题，远程攻击者可能利用这个问题猜测到Web目录的安装路径。 如果hellbent收到在请求中包含"../"字串的相对目录，当情况是先出Web目录，然后再进回到Web目录时，服务器会回应200 OK消息，如果情况是先出Web目录，而没有再进回到正确的Web目录时，服务器会回应403 Forbidden消息。因此对攻击者来说，通过暴力猜测可能得到Web的安装目录信息。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
II. Public POCs for CVE-2002-2094
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2002-2094
请登录查看更多情报信息。
Same Patch Batch · n/a · 2005-08-05 · 65 CVEs total
| CVE-2002-2122 | PalmOS平台下的Pointsec PIN泄露漏洞 | |
| CVE-2005-2475 | Info-ZIP UnZip 竞争条件问题漏洞 | |
| CVE-2005-2478 | Silvernews 'Admin.PHP' SQL注入漏洞 | |
| CVE-2005-2477 | Naxtor Shopping Cart 'Shop_Display_Products.PHP' SQL注入漏洞 | |
| CVE-2005-2476 | Naxtor Shopping 'Cart Lost_password.PHP' 跨站脚本漏洞 | |
| CVE-2005-1268 | mod_ssl 安全漏洞 | |
| CVE-2004-2301 | Qualcomm Eudora To:字段内存破坏漏洞 | |
| CVE-2004-2300 | UCD-SNMPD命令行解析本地缓冲区溢出漏洞 | |
| CVE-2004-2299 | Omnicron OmniHTTPD Get请求缓冲区溢出漏洞 | |
| CVE-2004-2298 | Novell Internet Messaging System (NIMS)和NetMail漏洞 | |
| CVE-2005-1272 | CA BrightStor ARCserve Backup 安全漏洞 | |
| CVE-2002-2121 | SurfControl Email Filter for SMTP HELO命令存在拒绝服务漏洞 | |
| CVE-2002-2120 | QNX RTOS Watcom Sample工具参数缓冲区溢出漏洞 | |
| CVE-2002-2119 | Novell eDirectory密码不够强壮漏洞 | |
| CVE-2002-2118 | Blue World Lasso Web数据引擎漏洞 | |
| CVE-2002-2117 | Microsoft Windows XP服务拒绝漏洞 | |
| CVE-2002-2116 | Netgear SOHO Router UDP端口扫描拒绝服务漏洞 | |
| CVE-2002-2115 | HNS多个跨站脚本漏洞 | |
| CVE-2002-2114 | Netjuke远程命令执行漏洞 | |
| CVE-2002-2113 | AHG搜索程序Search.CGI可执行任意命令漏洞 |
Showing top 20 of 65 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same vendor: n/a
- CVE-2026-8276
bettercap MySQL Server mysql_server.go integer coercion - CVE-2026-8275
bettercap zerogod IPP Service zerogod_ipp_primitives.go ippR - CVE-2026-8270
Open5GS SMF ogs_nas_parse_qos_rules denial of service - CVE-2026-8269
Open5GS SMF smf_nsmf_handle_create_sm_context denial of serv - CVE-2026-8268
Open5GS SMF OpenAPI_list_create denial of service
V. Comments for CVE-2002-2094
No comments yet