CVE-2004-1991

Опубликовано: 03 мая 2004

Источник: nvd

CVSS2: 5

EPSS Низкий

Описание

Directory traversal vulnerability in Aldo's Web Server (aweb) 1.5 allows remote attackers to view arbitrary files via a .. (dot dot) in an HTTP GET request.

Ссылки

http://marc.info/?l=bugtraq&m=108360629031227&w=2
Exploit
Issue Tracking
Third Party Advisory
http://secunia.com/advisories/11542
Third Party Advisory
http://www.oliverkarow.de/research/AldosWebserverMultipleVulns.txt
Exploit
Vendor Advisory
http://www.osvdb.org/5881
Broken Link
http://www.securityfocus.com/bid/10262
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/16048
VDB Entry
http://marc.info/?l=bugtraq&m=108360629031227&w=2
Exploit
Issue Tracking
Third Party Advisory
http://secunia.com/advisories/11542
Third Party Advisory
http://www.oliverkarow.de/research/AldosWebserverMultipleVulns.txt
Exploit
Vendor Advisory
http://www.osvdb.org/5881
Broken Link
http://www.securityfocus.com/bid/10262
Third Party Advisory
VDB Entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/16048
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:aldostools:aldo\'s_web_server:1.5:*:*:*:*:*:*:*

EPSS

Процентиль: 87%

0.03154

Низкий

5 Medium

CVSS2

Дефекты

CWE-22

Связанные уязвимости

GHSA-gw25-cpw2-g3m4

github

почти 4 года назад