5
CVSSv2

CVE-2004-0072

Published: 17/02/2004 Updated: 11/07/2017
CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10
VMScore: 505
Vector: AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Summary

Directory traversal vulnerability in Accipiter Direct Server 6.0 allows remote malicious users to read arbitrary files via encoded \.. (backslash .., "%5c%2e%2e") sequences in an HTTP request.

Vulnerable Product Search on Vulmon Subscribe to Product

accipiter accipiter direct server 6.0

Exploits

source: wwwsecurityfocuscom/bid/9389/info This vulnerability may allow and attacker to gain access to files that reside outside of the web root directory using a specially crafted URI that contains URL-encoded variations of directory traversal sequences This issue has been reported to affect Windows variants of the software It is not k ...