Published: 14/08/2001 Updated: 19/12/2017

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 765

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Directory traversal vulnerability in Drummond Miles A1Stats before 1.6 allows a remote malicious user to read arbitrary files via a '..' (dot dot) attack in (1) a1disp2.cgi, (2) a1disp3.cgi, or (3) a1disp4.cgi.

Vulnerable Product	Search on Vulmon	Subscribe to Product
drummond miles a1stats
drummond miles a1stats 1.0

source: wwwsecurityfocuscom/bid/2705/info A1Stats is a CGI product by Drummon Miles used to report on a website's visitor traffic Versions of this product fail to properly validate user-supplied input submitted as querystrings to the A1Stats script An attacker can compose a long path including '//' sequences, and submit it as ...

source: wwwsecurityfocuscom/bid/2705/info A1Stats is a CGI product by Drummon Miles used to report on a website's visitor traffic Versions of this product fail to properly validate user-supplied input submitted as querystrings to the A1Stats script An attacker can compose a long path including '//' sequences, and submit it as a file ...

source: wwwsecurityfocuscom/bid/2705/info A1Stats is a CGI product by Drummon Miles used to report on a website's visitor traffic Versions of this product fail to properly validate user-supplied input submitted as querystrings to the A1Stats script An attacker can compose a long path including '//' sequences, and submit it as a f ...

Trabalho Prático Final de Engenharia de Segurança

Engenharia de Segurança Vulnerabilities Mapping Raphael Jubram Sawaia Pinheiro (pg37160@alunosuminhopt) Gestão de Vulnerabilidades Uma das principais atividades de equipes de Segurança da Informação é fazer a Gestão de Vulnerabilidades Nesse trabalho, os analistas de segurança precisam identificar vulnerabilidades nos s

NVD-CWE-Other http://archives.neohapsis.com/archives/bugtraq/2001-05/0047.html http://www.securityfocus.com/bid/2705 http://www.kb.cert.org/vuls/id/471691 https://exchange.xforce.ibmcloud.com/vulnerabilities/6503 https://nvd.nist.gov https://github.com/jubram/es_tpf https://www.exploit-db.com/exploits/20833/https://www.kb.cert.org/vuls/id/471691

CVE-2001-0561

Vulnerability Summary

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect