Skip to content

CVE-2005-0450 Directory traversal vulnerability in Sami HTTP Server 1.0.5 allows remote attackers to read arbitrary files via an HTTP request containing (1) .. (dot dot) or (2) "%2e%2e" (encoded dot dot) sequences.

MediumCVSS 5.0 EPSS 3.1%
Published
Updated
Exploit status
No public exploit known

Description

Directory traversal vulnerability in Sami HTTP Server 1.0.5 allows remote attackers to read arbitrary files via an HTTP request containing (1) .. (dot dot) or (2) "%2e%2e" (encoded dot dot) sequences.

Affected products

ProductAffected versionsFixed in
sami http server = 1.0.5 No fix listed

References

  • 14283 third-party-advisory vendor-advisory
  • 1013191 exploit vdb-entry vendor-advisory