CVE-2001-0676 Directory traversal vulnerability in Rit Research Labs The Bat! 1.48f and earlier allows a remote attacker to create arbitrary files via a "dot dot" attack in the filename for an attachment.
MediumCVSS 5.0
EPSS 1.5%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Rit Research Labs The Bat! 1.48f and earlier allows a remote attacker to create arbitrary files via a "dot dot" attack in the filename for an attachment.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| ritlabs the bat | <= 1.48f | No fix listed |
References
- 20010104 SECURITY.NNOV advisory - The Bat! directory traversal (public release) exploit mailing-list patch vendor-advisory
- thebat-attachment-directory-traversal(5871) vdb-entry