medium5.0Public exploit code
CVE-2001-0557
T.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- T. Hauck Jana Server 1.45/1.46 - Hex Encoded Directory Traversal2001-05-07 · remote · windows · Verified
Impact
T. Hauck Jana Webserver 1.46 and earlier allows a remote attacker to view arbitrary files via a '..' (dot dot) attack which is URL encoded (%2e%2e).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| T. Hauck | Jana Web Server | through 1.46 Versions 1.0j, 1.45, 2.0_beta_1 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-05/0086.html
- http://www.kb.cert.org/vuls/id/132099
- http://www.securityfocus.com/bid/2703
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6513
- http://archives.neohapsis.com/archives/bugtraq/2001-05/0086.html
- http://www.kb.cert.org/vuls/id/132099
- http://www.securityfocus.com/bid/2703
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6513