CVE-2001-1295

CVE-2001-1295 is a directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier. The issue allows remote attackers to read arbitrary files by using a .. (dot dot) in the CD command. The available sources confirm the affected software and the traversal nature but do not provide exploit...

CVE-2001-1271

Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. dot dot attack on archived filenames...

CVE-2001-1270

Directory traversal vulnerability in the console version of PKZip pkzipc 4.00 and earlier allows attackers to overwrite arbitrary files during archive extraction with the -rec recursive option via a .. dot dot attack on the archived files...

CVE-2001-1344

WSSecurity.pl in WebStore allows remote attackers to bypass authentication by providing the program with a filename that exists, which is made easier by 1 inserting a null character or 2 .. dot dot...

CVE-2001-1196

CVE-2001-1196 concerns Webmin 0.91, where a directory traversal flaw in edit_action.cgi could allow privilege escalation via a .. argument. The vulnerability is documented with a high-severity score (CVSS v2: HIGH, base 10.0) and is referenced by multiple sources. A remediation available in the c...

CVE-2001-1115

The CVE-2001-1115 issue affects SIX-webboard 2.01 and earlier where generate.cgi does not properly validate the content parameter, allowing a remote attacker to perform directory traversal and read arbitrary files on the server with the web server’s permissions. This is caused by directory traver...

CVE-2001-1217

CVE-2001-1217 describes a directory traversal vulnerability in the PL/SQL Apache module (mod_plsql/mod_plsql) of Oracle 9i Application Server. The issue allows remote attackers to read sensitive files outside the web server’s root by crafting a request with double URL encoded sequences (..). Affe...

CVE-2001-1010

CVE-2001-1010 affects Sambar Server’s pagecount CGI script (located at /session/pagecount). The vulnerability arises because the page parameter is not validated against directory traversal (".."), enabling a remote attacker to overwrite arbitrary files on the filesystem. The root cause is lack of...

CVE-2000-0180

The CVE-2000-0180 issue affects the Sojourn search engine through the sojourn.cgi CGI, where a directory-traversal (.. ) flaw allows remote attackers to read arbitrary files. The vulnerability enables information disclosure by exploiting the CGI’s input handling, executing with the web server’s p...

CVE-2000-0180

Sojourn search engine allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2001-0676

Directory traversal vulnerability in Rit Research Labs The Bat! 1.48f and earlier allows a remote attacker to create arbitrary files via a "dot dot" attack in the filename for an attachment...

CVE-2000-1101

The CVE-2000-1101 entry describes a directory traversal vulnerability in Winsock FTPd (WFTPD) versions 3.00 and 2.41 when the “Restrict to home directory” option is enabled. The flaw allows local users to escape the home directory by crafting a "/../" sequence, a variant of the dot-dot attack. Th...

CVE-2001-0783

Cisco TFTP server 1.1 allows remote attackers to read arbitrary files via a ..dot dot attack in the GET command...

CVE-2001-0785

Directory traversal in Webpaging interface in Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 allows allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2001-0783

Cisco TFTP server 1.1 allows remote attackers to read arbitrary files via a ..dot dot attack in the GET command...

CVE-2001-0694

Directory traversal vulnerability in WFTPD 3.00 R5 allows a remote attacker to view arbitrary files via a dot dot attack in the CD command...

CVE-2001-0020

Technical details about CVE-2001-0020 are not publicly available in the provided connected documents. The material confirms a directory traversal vulnerability in Arrowpoint, but no further specifics, affected versions, or mitigations are included here. Monitor for updates.

CVE-2001-0694

Directory traversal vulnerability in WFTPD 3.00 R5 allows a remote attacker to view arbitrary files via a dot dot attack in the CD command...

CVE-2001-0582

Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' dot dot attack, or variations, in 1 GET, 2 CD, 3 NLST, 4 SIZE, 5 RETR...

CVE-2001-0555

ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. dot dot attack through 1 the SITEWare Editor's Desktop or 2 the template parameter in SWEditServlet...