CVE-2001-0582

Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' dot dot attack, or variations, in 1 GET, 2 CD, 3 NLST, 4 SIZE, 5 RETR...

CVE-2001-0555

ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. dot dot attack through 1 the SITEWare Editor's Desktop or 2 the template parameter in SWEditServlet...

CVE-2001-0582

Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' dot dot attack, or variations, in 1 GET, 2 CD, 3 NLST, 4 SIZE, 5 RETR...

CVE-2001-0555

ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. dot dot attack through 1 the SITEWare Editor's Desktop or 2 the template parameter in SWEditServlet...

CVE-2001-0557

T. Hauck Jana Webserver 1.46 and earlier allows a remote attacker to view arbitrary files via a '..' dot dot attack which is URL encoded %2e%2e...

CVE-2001-0561

CVE-2001-0561 affects Drummond Miles A1Stats prior to 1.6, via directory traversal in a1disp2.cgi, a1disp3.cgi, or a1disp4.cgi. The underlying issue is a dot-dot (.. ) traversal that allows reading arbitrary files, as documented in the initial entry. Connected Nessus plugins include multiple item...

CVE-2001-0582

CrushFTP FTP Server 2.1.6 and earlier is affected by a local directory-traversal vulnerability allowing access to arbitrary files via traversal sequences in FTP commands (GET, CD, NLST, SIZE, RETR). The underlying issue is inadequate input filtering that permits ".."-style path traversal, enablin...

CVE-2001-1271

Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. dot dot attack on archived filenames...

CVE-2001-0368

Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain files via a URL containing a series of . characters, a variation of the .. dot dot attack...

CVE-2000-0577

The vulnerability CVE-2000-0577 affects Netscape Professional Services FTP Server 1.3.6. It allows remote attackers to read arbitrary files using a directory-traversal (“..”) attack against the FTP service. The provided documents do not include remediation steps or patched versions. If exploitati...

CVE-2001-0054

Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appending a string such as "/..%20." to a CD command, a variant of a .. dot dot attack...

CVE-2000-1171

Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary files via a .. dot dot attack in the "thesection" parameter...

CVE-2001-0123

Technical details for CVE-2001-0123 are not publicly provided in the supplied connected documents. Monitor for updates.

CVE-2000-0577

Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2001-0054

Serv-U FTP server prior to version 2.5i suffers a directory traversal vulnerability affecting the CD command. An attacker can escape the FTP root and read arbitrary files by appending payloads like "/..%20." to CD, due to improper input sanitization. This is CVE-2001-0054. Affected product/versio...

CVE-2001-0202

Picserver web server allows remote attackers to read arbitrary files via a .. dot dot attack in an HTTP GET request...

CVE-2001-0253

CVE-2001-0253 : A directory traversal vulnerability exists in the iWeb Hyperseek 2000 hsx.cgi show parameter, allowing remote attackers to read arbitrary files and directories via a .. path. The affected component is the hsx.cgi CGI in iWeb Hyperseek 2000. The underlying issue is insufficient inp...

CVE-2001-0211

Directory traversal vulnerability in WebSPIRS 3.1 allows remote attackers to read arbitrary files via a .. dot dot attack on the sp.nextform parameter...

CVE-2001-0202

Picserver web server allows remote attackers to read arbitrary files via a .. dot dot attack in an HTTP GET request...

CVE-2001-0042

PHP 3.x PHP3 on Apache 1.3.6 allows remote attackers to read arbitrary files via a modified .. dot dot attack containing "%5c" encoded backslash sequences...