CVE-2001-1580 Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to read arbitrary files via ".." sequences in the query string.
MediumCVSS 5.0
EPSS 2.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to read arbitrary files via ".." sequences in the query string.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nombas scriptease webserver | = 4.30b | No fix listed |
| nombas scriptease webserver | = 4.30d | No fix listed |
| novell netware | = 5.1 | No fix listed |
| novell netware | = 5.1-sp2a | No fix listed |
References
- 20011219 IRM Security Advisory 002: Netware Web Server Source Disclosure exploit mailing-list vendor-advisory
- 20011220 Re: IRM Security Advisory 002: Netware Web Server Source Disclosure mailing-list
- 20011220 Re: IRM Security Advisory 002: Netware Web Server Source Disclosure mailing-list
- 3715 patch vdb-entry
- netware-webserver-directory-traversal(7726) vdb-entry