CVE-2002-0543 Directory traversal vulnerability in Aprelium Abyss Web Server (abyssws) before 1.0.0.2 allows remote attackers to read files outside the web root, including the abyss.conf file, via URL-encoded .. (d...
MediumCVSS 5.0
EPSS 9.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in Aprelium Abyss Web Server (abyssws) before 1.0.0.2 allows remote attackers to read files outside the web root, including the abyss.conf file, via URL-encoded .. (dot dot) sequences in the HTTP request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aprelium technologies abyss web server | = 1.0 | No fix listed |
References
- 20020409 Abyss Webserver 1.0 Administration password file retrieval exploit exploit mailing-list patch vendor-advisory
- www.aprelium.com patch
- abyss-unicode-directory-traversal(8805) patch vdb-entry vendor-advisory
- 4466 exploit patch vdb-entry vendor-advisory