Vulnerability Details CVE-2001-0615
Directory traversal vulnerability in Faust Informatics Freestyle Chat server prior to 4.1 SR3 allows a remote attacker to read arbitrary files via a specially crafted URL which includes variations of a '..' (dot dot) attack such as '...' or '....'.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.062
EPSS Ranking 90.4%
CVSS Severity
CVSS v2 Score 5.0
References
- http://archives.neohapsis.com/archives/bugtraq/2001-05/0241.html
- http://www.osvdb.org/1841
- http://www.securityfocus.com/bid/2776
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6601
- http://archives.neohapsis.com/archives/bugtraq/2001-05/0241.html
- http://www.osvdb.org/1841
- http://www.securityfocus.com/bid/2776
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6601
Products affected by CVE-2001-0615
-
cpe:2.3:a:faust_informatics:freestyle_chat:*