Vulnerability Details CVE-2001-1144
Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.053
EPSS Ranking 89.4%
CVSS Severity
CVSS v2 Score 5.0
References
- http://www.iss.net/security_center/static/6834.php
- http://www.kb.cert.org/vuls/id/190267
- http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0107&L=ntbugtraq&F=P&S=&P=1558
- http://www.osvdb.org/584
- http://www.securityfocus.com/archive/1/196272
- http://www.securityfocus.com/bid/3020
- http://www.iss.net/security_center/static/6834.php
- http://www.kb.cert.org/vuls/id/190267
- http://www.ntbugtraq.com/default.asp?pid=36&sid=1&A2=ind0107&L=ntbugtraq&F=P&S=&P=1558
- http://www.osvdb.org/584
- http://www.securityfocus.com/archive/1/196272
- http://www.securityfocus.com/bid/3020
Products affected by CVE-2001-1144
-
cpe:2.3:a:mcafee:asap_virusscan:1.0