CVE-2002-1861

CVE-2002-1861 describes a directory traversal vulnerability in Sybase Enterprise Application Server 4.0 running on Windows. Remote attackers can retrieve sensitive files, including Java class files and configuration information, from the WEB-INF directory by appending a trailing dot to the directory name in a request. This vulnerability has a CVSS score of 5.0, indicating a medium severity with a network attack vector, low complexity, and potential for partial confidentiality impact. There is no evidence of active exploitation, nor is exploit code publicly available through common platforms like Metasploit or ExploitDB, and it has received no community discussion or media coverage.