Vulnerability Details CVE-2001-1544
Directory traversal vulnerability in Macromedia JRun Web Server (JWS) 2.3.3, 3.0 and 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP GET request.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 58.3%
CVSS Severity
CVSS v2 Score 5.0
References
- http://www.iss.net/security_center/static/7678.php
- http://www.macromedia.com/v1/handlers/index.cfm?ID=22290&Method=Full
- http://www.securityfocus.com/bid/3666
- http://www.iss.net/security_center/static/7678.php
- http://www.macromedia.com/v1/handlers/index.cfm?ID=22290&Method=Full
- http://www.securityfocus.com/bid/3666
Products affected by CVE-2001-1544
-
cpe:2.3:a:macromedia:jrun:2.3.3
-
cpe:2.3:a:macromedia:jrun:3.0
-
cpe:2.3:a:macromedia:jrun:3.1