medium5.0Public exploit code
CVE-2002-1079
Directory traversal vulnerability in Abyss Web Server 1.0.3 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in an HTTP GE…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Abyss Web Server 1.0 - Encoded Backslash Directory Traversal2002-08-22 · remote · windows · Verified
Impact
Directory traversal vulnerability in Abyss Web Server 1.0.3 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in an HTTP GET request.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aprelium Technologies | Abyss Web Server | Version 1.0.3_p2 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0229.html
- http://www.aprelium.com/news/patch1033.html
- http://www.iss.net/security_center/static/9940.php
- http://www.iss.net/security_center/static/9941.php
- http://www.osvdb.org/3285
- http://www.securityfocus.com/bid/5547
- http://archives.neohapsis.com/archives/bugtraq/2002-08/0229.html
- http://www.aprelium.com/news/patch1033.html
- http://www.iss.net/security_center/static/9940.php
- http://www.iss.net/security_center/static/9941.php
- http://www.osvdb.org/3285
- http://www.securityfocus.com/bid/5547