CVE-2002-1079 Directory traversal vulnerability in Abyss Web Server 1.0.3 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in an HTTP GET request.
MediumCVSS 5.0
EPSS 4.7%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in Abyss Web Server 1.0.3 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in an HTTP GET request.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| aprelium technologies abyss web server | = 1.0.3_p2 | No fix listed |
References
- 20020822 Abyss 1.0.3 directory traversal and administration bugs mailing-list
- www.aprelium.com
- abyss-http-directory-traversal(9940) patch vdb-entry vendor-advisory
- abyss-get-directory-traversal(9941) patch vdb-entry vendor-advisory
- 3285 vdb-entry
- 5547 vdb-entry