CVE-2001-0038 Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive letter (e.g. C:) in the requested URL.
MediumCVSS 5.0
EPSS 3.3%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Offline Explorer 1.4 before Service Release 2 allows remote attackers to read arbitrary files by specifying the drive letter (e.g. C:) in the requested URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| metaproducts offline explorer | = 1.0x | No fix listed |
| metaproducts offline explorer | = 1.1x | No fix listed |
| metaproducts offline explorer | = 1.2x | No fix listed |
| metaproducts offline explorer | = 1.3x | No fix listed |
References
- 20001207 MetaProducts Offline Explorer mailing-list vendor-advisory
- 2084 exploit patch vdb-entry vendor-advisory
- offline-explorer-reveal-files(5728) vdb-entry