CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS
Percentile
90.7%
The SEDUM web server permits intruders to access files outside the web root.
The SEDUM Web Server permits intruders to access files outside the web root using a GET request containing “…” (dot dot). This can expose files (including files with sensitive information) to exposure by unauthorized individuals.
Intruders can read files accessible to the SEDUM web server they should not be able to read .
The CERT/CC is currently unaware of a practical solution to this problem.
Javascript is disabled. Click here to view vendors.
Group | Score | Vector |
---|---|---|
Base | ||
Temporal | ||
Environmental |
Our thanks to Joe Testa, who originally reported this problem on BugTraq.
This document was written by Shawn V. Hernan.
CVE IDs: | CVE-2001-0199 |
---|---|
Severity Metric: | 1.50 Date Public: |