Back to Database
Status published
Medium
CVE-2002-0298
ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a...
Vulnerability Description
ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) via certain HTTP GET requests containing (1) a %2e%2e (encoded dot-dot), (2) several /../ (dot dot) sequences, (3) a missing URI, or (4) several ../ in a URI that does not begin with a / (slash) character.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2002-0298
Credits & Attribution
No credits recorded in the NVD database.
More from nombas
View All →CVE-2002-0323
comment2.jse in ScriptEase:WebServer allows remote attackers to read arbitrary files...
Medium
5
CVE-2002-0297
Buffer overflow in ScriptEase MiniWeb Server 0.95 allows remote attackers...
Medium
5
CVE-2001-1580
Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before...
Medium
5
Affected Vendor
nombas
View all reports →Affected Software
scriptease webserver
Vulnerable Versions:
0.95
Timeline
Official Publish:
May 3rd, 2002
Last Modified:
August 8th, 2024
Added to House:
July 18th, 2026
CVSS Vectors
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.