CVE-2003-1172 Directory traversal vulnerability in the view-source sample file in Apache Software Foundation Cocoon 2.1 and 2.2 allows remote attackers to access arbitrary files via a .. (dot dot) in the filename p...
MediumCVSS 5.0
EPSS 30.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in the view-source sample file in Apache Software Foundation Cocoon 2.1 and 2.2 allows remote attackers to access arbitrary files via a .. (dot dot) in the filename parameter.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apache cocoon | = 2.1 | No fix listed |
| apache cocoon | = 2.1.2 | No fix listed |
| apache cocoon | = 2.2 | No fix listed |
References
- issues.apache.org
- 10064 exploit third-party-advisory
- 1007993 exploit vdb-entry
- 2749 vdb-entry
- www.securiteam.com exploit patch
- 8883 exploit vdb-entry
- apachecocoon-directory-traversal-bootini(13499) vdb-entry