{
    "id": "CVE-2004-2640",
    "published": "2004-12-31 05:00:00",
    "last_modified": "2026-06-16 22:10:02",
    "cvss_score": "5.0",
    "cvss_severity": "MEDIUM",
    "cvss_version": "2.0",
    "cvss_vector": "AV:N/AC:L/Au:N/C:P/I:N/A:N",
    "cwe": null,
    "description": "Directory traversal vulnerability in lstat.cgi in LinuxStat before 2.3.1 allows remote attackers to read arbitrary files via (1) .. (dot dot) sequences or (2) absolute paths to the template parameter.",
    "epss_score": "0.08116",
    "epss_percentile": "0.94650",
    "kev": 0,
    "kev_due": null,
    "has_exploit": 1,
    "updated_at": "2026-09-29 18:17:04",
    "priority": {
        "rank": 2,
        "label": "Patch early",
        "why": "A public exploit exists."
    },
    "products": [
        {
            "vendor": "ryszard_pydo",
            "product": "linuxstat"
        }
    ],
    "kev_detail": null,
    "exploits": [
        {
            "source": "exploit-db",
            "ref_id": "24703",
            "title": "LinuxStat 2.x - Directory Traversal",
            "date": "2004-10-25",
            "url": "https://www.exploit-db.com/exploits/24703"
        }
    ],
    "refs_list": [
        "http://secunia.com/advisories/12963",
        "http://securitytracker.com/id?1011920",
        "http://sourceforge.net/project/shownotes.php?release_id=277371",
        "http://www.osvdb.org/11103",
        "http://www.securityfocus.com/bid/11517",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/17833",
        "http://secunia.com/advisories/12963",
        "http://securitytracker.com/id?1011920",
        "http://sourceforge.net/project/shownotes.php?release_id=277371",
        "http://www.osvdb.org/11103",
        "http://www.securityfocus.com/bid/11517",
        "https://exchange.xforce.ibmcloud.com/vulnerabilities/17833"
    ]
}