CVE-2000-0664 AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack that uses the %2E URL encoding for the dots.
MediumCVSS 5.0
EPSS 7.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack that uses the %2E URL encoding for the dots.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| analogx simpleserver www | = 1.0.6 | No fix listed |
References
- 20000726 AnalogX "SimpleServer:WWW" dot dot bug exploit mailing-list patch vendor-advisory
- www.analogx.com
- 388 vdb-entry
- 1508 vdb-entry
- analogx-simpleserver-directory-path(4999) vdb-entry