medium5.0Public exploit code
CVE-2002-0543
Directory traversal vulnerability in Aprelium Abyss Web Server (abyssws) before 1.0.0.2 allows remote attackers to read files outside the web root, including t…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Abyss Web Server 1.0 - File Disclosure2002-04-07 · remote · windows · Verified
Impact
Directory traversal vulnerability in Aprelium Abyss Web Server (abyssws) before 1.0.0.2 allows remote attackers to read files outside the web root, including the abyss.conf file, via URL-encoded .. (dot dot) sequences in the HTTP request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aprelium Technologies | Abyss Web Server | Version 1.0 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0110.html
- http://www.aprelium.com/forum/viewtopic.php?t=24
- http://www.iss.net/security_center/static/8805.php
- http://www.securityfocus.com/bid/4466
- http://archives.neohapsis.com/archives/bugtraq/2002-04/0110.html
- http://www.aprelium.com/forum/viewtopic.php?t=24
- http://www.iss.net/security_center/static/8805.php
- http://www.securityfocus.com/bid/4466