CVE-2002-2094

Joe Testa hellbent 01 allows remote attackers to determine the full path of the web root directory via a GET request with a relative path that includes the root's parent, which generates a 403 error message if the parent is incorrect, but a normal response if the parent is correct.

• CWE-203

• http://archives.neohapsis.com/archives/bugtraq/2002-01/0228.htmlBroken Link, Exploit, Patch, Vendor Advisory
• http://www.iss.net/security_center/static/7930.phpBroken Link, Patch
• http://www.securityfocus.com/bid/3908Broken Link, Patch, Third Party Advisory, VDB Entry
• http://archives.neohapsis.com/archives/bugtraq/2002-01/0228.htmlBroken Link, Exploit, Patch, Vendor Advisory
• http://www.iss.net/security_center/static/7930.phpBroken Link, Patch
• http://www.securityfocus.com/bid/3908Broken Link, Patch, Third Party Advisory, VDB Entry

Published

Dec 31, 2002

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2002-2088The MOSIX Project clump/os 5.4 creates a default VNC account…
• CVE-2002-2089Buffer overflow in rcp in Solaris 9.0 allows local users to …
• CVE-2002-2090Caucho Technology Resin server 2.1.1 to 2.1.2 allows remote …
• CVE-2002-2091Format string vulnerability in Deception Finger Daemon, decf…
• CVE-2002-2092Race condition in exec in OpenBSD 4.0 and earlier, NetBSD 1.…
• CVE-2002-2093The Video Control Panel on SGI O2/IRIX 6.5, when the Default…
• CVE-2002-2095Joe Testa hellbent 01 webserver allows attackers to read fil…
• CVE-2002-2096Buffer overflow in Novell Remote Manager module, httpstk.nlm…
• CVE-2002-2097The compression code in MaraDNS before 0.9.01 allows remote …
• CVE-2002-2098Buffer overflow in axspawn.c in Axspawn-pam before 0.2.1a al…
• CVE-2002-2099Buffer overflow in the GNU DataDisplay Debugger (DDD) 3.3.1 …
• CVE-2002-2100Microsoft Outlook 2002 allows remote attackers to embed bypa…