CVE-2001-0615

Опубликовано: 14 авг. 2001

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' (dot dot) attack such as '...' or '....'.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2001-05/0241.html
Exploit
Patch
Vendor Advisory
http://www.osvdb.org/1841
http://www.securityfocus.com/bid/2776
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6601
http://archives.neohapsis.com/archives/bugtraq/2001-05/0241.html
Exploit
Patch
Vendor Advisory
http://www.osvdb.org/1841
http://www.securityfocus.com/bid/2776
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6601

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:faust_informatics:freestyle_chat:*:*:*:*:*:*:*:*

Версия до 4.1 (включая)

EPSS

Процентиль: 90%

0.0618

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-6m6j-2f5r-3rfw

github

больше 3 лет назад