CVE-2001-0574 Directory traversal vulnerability in MP3Mystic prior to 1.04b3 allows a remote attacker to download arbitrary files via a '..' (dot dot) in the URL.
MediumCVSS 5.0
EPSS 3.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in MP3Mystic prior to 1.04b3 allows a remote attacker to download arbitrary files via a '..' (dot dot) in the URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| jason rahaim mp3mystic | = 1.0 | No fix listed |
| jason rahaim mp3mystic | = 1.0.1 | No fix listed |
| jason rahaim mp3mystic | = 1.0.3 | No fix listed |
| jason rahaim mp3mystic | = 1.0.4 | No fix listed |
References
- 20010507 Advisory for MP3Mystic mailing-list patch vendor-advisory
- mp3mystic.com exploit patch vendor-advisory
- 1815 vdb-entry
- 2699 exploit patch vdb-entry vendor-advisory
- mp3mystic-dot-directory-traversal(6504) vdb-entry