medium5.0
CVE-2001-0982
Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via e…
Impact
Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via encoded .. (dot dot) sequences containing "%2e" strings.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Ibm | Tivoli Secureway Policy Director | Versions 3.0.1, 3.6, 3.7, 3.7.1 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0497.html
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY18152&apar=only
- http://www.osvdb.org/1908
- http://www.securityfocus.com/bid/3080
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6884
- http://archives.neohapsis.com/archives/bugtraq/2001-07/0497.html
- http://www-1.ibm.com/support/search.wss?rs=0&q=IY18152&apar=only
- http://www.osvdb.org/1908
- http://www.securityfocus.com/bid/3080
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6884