CVE-2001-0674

Опубликовано: 20 сент. 2001

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a hexadecimal encoded dot-dot attack (eg. http://www.server.com/%2e%2e/%2e%2e) in an HTTP URL request.

Ссылки

http://www.robtex.com/viking/bugs.htm
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/177231
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6394
http://www.robtex.com/viking/bugs.htm
Patch
Vendor Advisory
http://www.securityfocus.com/archive/1/177231
Exploit
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6394

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:robtex:viking_server:*:*:*:*:*:*:*:*

Версия до 1.0.7_build381 (включая)

cpe:2.3:a:robtex:viking_server:1.0.4:*:*:*:*:*:*:*

cpe:2.3:a:robtex:viking_server:1.0.6:*:*:*:*:*:*:*

cpe:2.3:a:robtex:viking_server:1.0.7:*:*:*:*:*:*:*

EPSS

Процентиль: 63%

0.00455

Низкий

5 Medium

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-r37v-9rmc-jc9m

github

почти 4 года назад