medium5.0Public exploit code
CVE-2001-0615
Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- faust Informatics FreeStyle chat 4.1 sr2 - Directory Traversal2001-05-25 · remote · multiple · Verified
Impact
Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' (dot dot) attack such as '...' or '....'.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Faust Informatics | Freestyle Chat | through 4.1 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-05/0241.html
- http://www.osvdb.org/1841
- http://www.securityfocus.com/bid/2776
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6601
- http://archives.neohapsis.com/archives/bugtraq/2001-05/0241.html
- http://www.osvdb.org/1841
- http://www.securityfocus.com/bid/2776
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6601