CVE-2001-0785

Directory traversal in Webpaging interface in Internet Software Solutions Air Messenger LAN Server AMLServer 3.4.2 allows allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2001-0783

Cisco TFTP server 1.1 allows remote attackers to read arbitrary files via a ..dot dot attack in the GET command...

CVE-2001-0694

Directory traversal vulnerability in WFTPD 3.00 R5 allows a remote attacker to view arbitrary files via a dot dot attack in the CD command...

CVE-2001-0020

Technical details about CVE-2001-0020 are not publicly available in the provided connected documents. The material confirms a directory traversal vulnerability in Arrowpoint, but no further specifics, affected versions, or mitigations are included here. Monitor for updates.

CVE-2001-0694

Directory traversal vulnerability in WFTPD 3.00 R5 allows a remote attacker to view arbitrary files via a dot dot attack in the CD command...

CVE-2001-0582

Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' dot dot attack, or variations, in 1 GET, 2 CD, 3 NLST, 4 SIZE, 5 RETR...

CVE-2001-0555

ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. dot dot attack through 1 the SITEWare Editor's Desktop or 2 the template parameter in SWEditServlet...

CVE-2001-0555

ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. dot dot attack through 1 the SITEWare Editor's Desktop or 2 the template parameter in SWEditServlet...

CVE-2001-0582

Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' dot dot attack, or variations, in 1 GET, 2 CD, 3 NLST, 4 SIZE, 5 RETR...

CVE-2001-0561

CVE-2001-0561 affects Drummond Miles A1Stats prior to 1.6, via directory traversal in a1disp2.cgi, a1disp3.cgi, or a1disp4.cgi. The underlying issue is a dot-dot (.. ) traversal that allows reading arbitrary files, as documented in the initial entry. Connected Nessus plugins include multiple item...

CVE-2001-0582

CrushFTP FTP Server 2.1.6 and earlier is affected by a local directory-traversal vulnerability allowing access to arbitrary files via traversal sequences in FTP commands (GET, CD, NLST, SIZE, RETR). The underlying issue is inadequate input filtering that permits ".."-style path traversal, enablin...

CVE-2001-0557

T. Hauck Jana Webserver 1.46 and earlier allows a remote attacker to view arbitrary files via a '..' dot dot attack which is URL encoded %2e%2e...

CVE-2001-1271

Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. dot dot attack on archived filenames...

CVE-2001-0368

Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain files via a URL containing a series of . characters, a variation of the .. dot dot attack...

Advisory for Freestyle Chat server

Advisory for Freestyle Chat server Freestyle Chat server is made by Faust Informatics Site: http://www.faust-net.de by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0124 /-|=explanation=|- Freestyle Chat server is http chat environment. It is vulnerable to a variation of...

Advisory for Jana server

Advisory for Jana Webserver Site: http://www.janaserver.de by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0112 /-|=explanation=|- Jana Webserver is well, a webserver. It has a hex-encoded dot dot bug and a denial of service. /-|=who is vulnerable=|- Tested to be...

Advisory for MP3Mystic

Advisory for MP3Mystic MP3Mystic is made by mp3mystic.com Site: http://www.mp3mystic.com by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0117 /-|=explanation=|- MP3Mystic is a webserver that lets a visitor browse your harddrive only showing MP3 files. It is vulnerable to...

CVE-2001-0054

Serv-U FTP server prior to version 2.5i suffers a directory traversal vulnerability affecting the CD command. An attacker can escape the FTP root and read arbitrary files by appending payloads like "/..%20." to CD, due to improper input sanitization. This is CVE-2001-0054. Affected product/versio...

CVE-2000-0577

The vulnerability CVE-2000-0577 affects Netscape Professional Services FTP Server 1.3.6. It allows remote attackers to read arbitrary files using a directory-traversal (“..”) attack against the FTP service. The provided documents do not include remediation steps or patched versions. If exploitati...

CVE-2001-0054

Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appending a string such as "/..%20." to a CD command, a variant of a .. dot dot attack...