CVE-2001-0447 Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request containing "%2e" (dot dot) character...
HighCVSS 7.5
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Web configuration server in 602Pro LAN SUITE allows remote attackers to cause a denial of service, and possibly execute arbitrary commands, via a long HTTP request containing "%2e" (dot dot) characters.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| software602 602pro lan suite | = 2000a_2000.0.1.34 | No fix listed |
References
- 20010326 602Pro Lansuite Denial Of Service 1.0.34 mailing-list vendor-advisory
- 2514 vdb-entry vendor-advisory