CVE-2001-0557

T. Hauck Jana Webserver 1.46 and earlier allows a remote attacker to view arbitrary files via a '..' dot dot attack which is URL encoded %2e%2e...

CVE-2001-0582: Undefined Security Weakness

Ben Spink CrushFTP FTP Server 2.1.6 and earlier allows a local attacker to access arbitrary files via a '..' dot dot attack, or variations, in 1 GET, 2 CD, 3 NLST, 4 SIZE, 5 RETR...

CVE-2001-0555: Undefined Security Weakness

ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. dot dot attack through 1 the SITEWare Editor's Desktop or 2 the template parameter in SWEditServlet...

CVE-2001-1271

Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. dot dot attack on archived filenames...

CVE-2001-1266

Directory traversal vulnerability in Doug Neal's HTTPD Daemon DNHTTPD before 0.4.1 allows remote attackers to view arbitrary files via a .. dot dot attack using the dot hex code '%2E'...

CVE-2001-0368

Directory traversal vulnerability in BearShare 2.2.2 and earlier allows a remote attacker to read certain files via a URL containing a series of . characters, a variation of the .. dot dot attack...

Advisory for Freestyle Chat server

Advisory for Freestyle Chat server Freestyle Chat server is made by Faust Informatics Site: http://www.faust-net.de by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0124 /-|=explanation=|- Freestyle Chat server is http chat environment. It is vulnerable to a variation of...

CVE-2001-0491: Undefined Security Weakness

Directory traversal vulnerability in RaidenFTPD Server 2.1 before build 952 allows attackers to access files outside the ftp root via dot dot attacks, such as 1 .... in CWD, 2 .. in NLST, or 3 ... in NLST...

Advisory for Jana server

Advisory for Jana Webserver Site: http://www.janaserver.de by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0112 /-|=explanation=|- Jana Webserver is well, a webserver. It has a hex-encoded dot dot bug and a denial of service. /-|=who is vulnerable=|- Tested to be...

Advisory for MP3Mystic

Advisory for MP3Mystic MP3Mystic is made by mp3mystic.com Site: http://www.mp3mystic.com by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0117 /-|=explanation=|- MP3Mystic is a webserver that lets a visitor browse your harddrive only showing MP3 files. It is vulnerable to...

CVE-2000-0577

The vulnerability CVE-2000-0577 affects Netscape Professional Services FTP Server 1.3.6. It allows remote attackers to read arbitrary files using a directory-traversal (“..”) attack against the FTP service. The provided documents do not include remediation steps or patched versions. If exploitati...

CVE-2001-0054

Serv-U FTP server prior to version 2.5i suffers a directory traversal vulnerability affecting the CD command. An attacker can escape the FTP root and read arbitrary files by appending payloads like "/..%20." to CD, due to improper input sanitization. This is CVE-2001-0054. Affected product/versio...

CVE-2001-0123

Technical details for CVE-2001-0123 are not publicly provided in the supplied connected documents. Monitor for updates.

CVE-2000-1171

The CVE-2000-1171 issue affects CGIForum 1.0’s cgiforum.pl (thesection parameter) where insufficient input validation allows directory traversal. An attacker can craft a URL (e.g., ?thesection=../../../../etc/passwd) to access files on the web server, with the accessible scope limited by the web ...

CVE-2001-0054

Directory traversal vulnerability in FTP Serv-U before 2.5i allows remote attackers to escape the FTP root and read arbitrary files by appending a string such as "/..%20." to a CD command, a variant of a .. dot dot attack...

CVE-2000-1171

Directory traversal vulnerability in cgiforum.pl script in CGIForum 1.0 allows remote attackers to ready arbitrary files via a .. dot dot attack in the "thesection" parameter...

CVE-2000-0577

Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2000-0577: Undefined Security Weakness

Netscape Professional Services FTP Server 1.3.6 allows remote attackers to read arbitrary files via a .. dot dot attack...

CVE-2001-0202

Picserver web server allows remote attackers to read arbitrary files via a .. dot dot attack in an HTTP GET request...

Advisory for perl webserver

Advisory for Perl Web Server Site: http://perlwebserver.sourceforge.net by nemesystm of the DHC http://dhcorp.cjb.net - [email protected] ADV-0113 /-|=explanation=|- Perl Web Server has a simple dot dot bug bug. /-|=who is vulnerable=|- Tested to be vulnerable to the hex-encoded dot dot bug...