Published: 08/10/1999 Updated: 18/10/2016

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Directory traversal vulnerability in Jana proxy web server 1.40 allows remote malicious users to ready arbitrary files via a "......" (modified dot dot) attack.

Vulnerable Product	Search on Vulmon	Subscribe to Product
t. hauck jana web server 1.0
t. hauck jana web server 1.40
t. hauck jana web server 1.45
t. hauck jana web server 1.46

source: wwwsecurityfocuscom/bid/699/info The Jana webserver is susceptible to directory traversal attacks using multiple dots in the URL If the request is made in specific formats, the server will send out files outside of the intended webroot http&nbsp;://target////////winini or http&nbsp;://target//autoexe ...

NVD-CWE-Other http://www.securityfocus.com/bid/699 http://marc.info/?l=bugtraq&m=93941794201059&w=2 https://nvd.nist.gov https://www.exploit-db.com/exploits/19540/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-1999-1082

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect