5
CVSSv2

CVE-2001-0199

Published: 03/05/2001 Updated: 11/07/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Directory traversal vulnerability in SEDUM HTTP Server 2.0 allows remote malicious users to read arbitrary files via a .. (dot dot) attack in the HTTP GET request.

Vulnerable Product Search on Vulmon Subscribe to Product

guido frassetto sedum 2.0

Exploits

source: wwwsecurityfocuscom/bid/2335/info A remote user could gain read access to known files outside of the root directory in a SEDUM HTTP Server Requesting a specially crafted URL composed of '/' or '/' sequences will disclose the requested file target//[file outside web root] target//[file outside web root] ...