CVE-2003-0474

CVE-2003-0474 describes a directory traversal vulnerability in iWeb Server. An attacker can read arbitrary files by sending HTTP requests containing .. sequences. The issue is distinct from CVE-2003-0475; no specific affected versions are stated in the provided documents. The CVSS data indicates ...

CVE-2003-0475

CVE-2003-0475 : A directory traversal vulnerability in iWeb Server 2 allows remote attackers to read arbitrary files via an HTTP request containing URL-encoded .. sequences ("%5c%2e%2e"). This is a separate issue from CVE-2003-0474. The provided documents confirm the affected product and the expl...