CVE-2000-0920 Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack in the GET HTTP request that uses a "%2E" in...
MediumCVSS 5.0
EPSS 8.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in BOA web server 0.94.8.2 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack in the GET HTTP request that uses a "%2E" instead of a "."
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| boa webserver | <= 0.94.8.2 | No fix listed |
References
- 20001006 Vulnerability in BOA web server v0.94.8.2 mailing-list
- boa-webserver-get-dir-traversal(5330) vdb-entry
- 1770 exploit patch vdb-entry vendor-advisory
- 20001009 boa: exposes contents of local files vendor-advisory