CVE-2004-2121 Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attackers to read and download arbitrary files via (1) multi-dot "......" sequences, or (2) "%5c...
MediumCVSS 5.0
EPSS 3.1%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple directory traversal vulnerabilities in Borland Web Server (BWS) 1.0b3 and earlier allow remote attackers to read and download arbitrary files via (1) multi-dot "......" sequences, or (2) "%5c%2e%2e" (encoded "..") sequences, in the URL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| borland software web server for corel paradox | <= 1.0_b3 | No fix listed |
References
- 20040124 BWS v1.0b3 Directory Transversal Vulnerability mailing-list
- 1008840 exploit vdb-entry
- 9486 exploit vdb-entry
- bws-directory-traversal(14948) vdb-entry