CVE-2004-2640

Medium severity, CVSS 5.0. EPSS: 8.1% chance of exploitation in the next 30 days.

Directory traversal vulnerability in lstat.cgi in LinuxStat before 2.3.1 allows remote attackers to read arbitrary files via (1) .. (dot dot) sequences or (2) absolute paths to the template parameter.

Published 2004-12-31. Last modified 2026-06-16.