CVE-2001-0557

  1. Reconshell
  2. Vulnerabilities (CVE)
  3. CVE-2001-0557
T. Hauck Jana Webserver 1.46 and earlier allows a remote attacker to view arbitrary files via a '..' (dot dot) attack which is URL encoded (%2e%2e).

5.0 /10

CVSS v2.0 : MEDIUM

V2 Legend

Vector : AV:N/AC:L/Au:N/C:P/I:N/A:N

Exploitability : 10.0 / Impact : 2.9

Access Vector NETWORK

Access Complexity LOW

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact NONE

Availability Impact NONE

References
Link Resource
http://archives.neohapsis.com/archives/bugtraq/2001-05/0086.html Exploit Patch Vendor Advisory
http://www.securityfocus.com/bid/2703 Exploit Patch Vendor Advisory
http://www.kb.cert.org/vuls/id/132099 US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/6513
Advertisement

NeevaHost hosting service
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:t._hauck:jana_web_server:1.0j:*:*:*:*:*:*:*
cpe:2.3:a:t._hauck:jana_web_server:1.45:*:*:*:*:*:*:*
cpe:2.3:a:t._hauck:jana_web_server:2.0_beta_1:*:*:*:*:*:*:*
cpe:2.3:a:t._hauck:jana_web_server:*:*:*:*:*:*:*:*
Information

Published : 2001-08-13 21:00

Updated : 2017-12-18 18:29

NVD link : CVE-2001-0557

Mitre link : CVE-2001-0557

JSON object : View

CWE
NVD-CWE-Other
Advertisement

dedicated server usa
Products Affected

t._hauck

  • jana_web_server