CVE-2001-0982

IBM Tivoli WebSEAL Policy Director versions 3.01–3.7.1 are affected by a directory traversal vulnerability that allows remote attackers to read arbitrary files or directories via encoded dot-dot sequences containing %2e. The underlying issue is an improper normalization/handling of encoded ../ pa...

CVE-2001-0982: Undefined Security Weakness

Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via encoded .. dot dot sequences containing "%2e" strings...

iXsecurity.20010618.policy_director.a

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 iXsecurity Security Vulnerability Report No: iXsecurity.20010618.policydirector.a ========================================= Vulnerability Summary - ------------------- Problem: Web Seal Policy director does not handle URLs in hex code correct. It is...