CVE-2004-2516 Directory traversal vulnerability in myServer 0.7 allows remote attackers to list arbitrary directories via an HTTP GET command with a large number of "./" sequences followed by "../" sequences.
MediumCVSS 5.0
EPSS 8.4%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Directory traversal vulnerability in myServer 0.7 allows remote attackers to list arbitrary directories via an HTTP GET command with a large number of "./" sequences followed by "../" sequences.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| myserver | <= 0.7 | No fix listed |
References
- 20040915 myServer 0.7 Directory Traversal Vulnerability mailing-list patch
- 12561 third-party-advisory vendor-advisory
- 1011278 exploit vdb-entry
- sourceforge.net patch
- 10001 exploit vdb-entry
- 11189 exploit patch vdb-entry
- myserver-get-directory-traversal(17390) vdb-entry