CVE-2001-0966 Directory traversal vulnerability in Nudester 1.10 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the CD (CWD) command.
HighCVSS 10.0
EPSS 3.0%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in Nudester 1.10 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the CD (CWD) command.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nudester.org nudester | <= 1.10 | No fix listed |
References
- 20010818 [Real Security] Advisory for Nudester 1.10 exploit mailing-list vendor-advisory
- 3202 patch vdb-entry vendor-advisory