CVE-2001-1144

Impact

Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request.

Affected products

References

• NVD record
• CVE.org record
• http://www.iss.net/security_center/static/6834.php
• http://www.kb.cert.org/vuls/id/190267
• http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0107&L=ntbugtraq&F=P&S=&P=1558
• http://www.osvdb.org/584
• http://www.securityfocus.com/archive/1/196272
• http://www.securityfocus.com/bid/3020
• http://www.iss.net/security_center/static/6834.php
• http://www.kb.cert.org/vuls/id/190267
• http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0107&L=ntbugtraq&F=P&S=&P=1558
• http://www.osvdb.org/584
• http://www.securityfocus.com/archive/1/196272
• http://www.securityfocus.com/bid/3020