Skip to content

CVE-2002-0772

Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote...

6.4 MediumPublic exploit

CVE-2002-0772 is a medium vulnerability (CVSS 6.4) in Hosting Controller Controller, published July 26, 2002. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 9.24%, the 95th percentile. No source names a fixed version.

Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName parameter.

Exploit likelihood

9.24%Up 5.1 points since Feb 4, 2022

What each source reports

NVD Score used 6.4

Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName parameter.

Record: CVE-2002-0772
CVSS 2.0: 6.4 MediumAV:N/AC:L/Au:N/C:P/I:P/A:N
Updated: 2026-11-02

CVE List No score

Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName parameter.

Record: CVE-2002-0772
Updated: 2026-11-02

EUVDEUVD-2002-0764 No score

Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName parameter.

Record: EUVD-2002-0764
Updated: 2026-11-03

GitHub AdvisoriesGHSA-7676-43cm-ffjm No score

Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote...

Directory traversal vulnerability in dsnmanager.asp for Hosting Controller allows remote attackers to read arbitrary files and directories via a .. (dot dot) in the RootName parameter.

Record: GHSA-7676-43cm-ffjm
Updated: 2026-11-02

Affected products

hosting controller controller

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
Source	Link	Date
Exploit-DB	Hosting Controller 1.x - DSNManager Directory Traversal	2002-05-17

History

History
When	Changed	Sources
2026-11-03	aliases	EUVD
2026-11-02	created	CVE List, Exploit-DB, GitHub Advisories, NVD

References