3 matches found
CVE-2001-0467
The CVE-2001-0467 vulnerability affects RobTex Viking Web Server prior to 1.07-381. A directory-traversal flaw allows remote attackers to read arbitrary files via a modified dot-dot sequence in an HTTP URL request, exposing server file contents (read access as allowed by the web server). CERT/KB ...
CVE-2001-0674
CVE-2001-0674 describes a directory traversal vulnerability in the RobTex Viking Web server, prior to version 1.07-381. An unauthenticated remote attacker can read arbitrary files by crafting a hexadecimal encoded dot-dot sequence in an HTTP URL (e.g., http://www.server.com/%2e%2e/%2e%2e). The vu...
CVE-2000-0775
The CVE concerns RobTex Viking server before version 1.06-370, where a buffer overflow in the HTTP request handling (long GET requests and long If-Modified-Since/If-Range headers) allows remote attackers to cause denial of service or execute arbitrary commands. The vulnerability is triggered by o...