Vulnerability Details CVE-2001-1586
Directory traversal vulnerability in SimpleServer:WWW 1.13 and earlier allows remote attackers to execute arbitrary programs via encoded ../ ("%2E%2E%2F%") sequences in a request to the cgi-bin/ directory, a different vulnerability than CVE-2000-0664.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.026
EPSS Ranking 85.0%
CVSS Severity
CVSS v2 Score 10.0
References
- http://seclists.org/bugtraq/2001/Jul/660
- http://www.analogx.com/contents/download/network/sswww.htm
- http://www.securiteam.com/windowsntfocus/5TP0B1P4UK.html
- http://www.securityfocus.com/bid/3112
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56631
- http://seclists.org/bugtraq/2001/Jul/660
- http://www.analogx.com/contents/download/network/sswww.htm
- http://www.securiteam.com/windowsntfocus/5TP0B1P4UK.html
- http://www.securityfocus.com/bid/3112
- https://exchange.xforce.ibmcloud.com/vulnerabilities/56631
Products affected by CVE-2001-1586
-
cpe:2.3:a:analogx:simpleserver_www:-
-
cpe:2.3:a:analogx:simpleserver_www:1.0.1
-
cpe:2.3:a:analogx:simpleserver_www:1.0.3
-
cpe:2.3:a:analogx:simpleserver_www:1.0.6
-
cpe:2.3:a:analogx:simpleserver_www:1.0.8
-
cpe:2.3:a:analogx:simpleserver_www:1.01
-
cpe:2.3:a:analogx:simpleserver_www:1.03
-
cpe:2.3:a:analogx:simpleserver_www:1.04
-
cpe:2.3:a:analogx:simpleserver_www:1.05
-
cpe:2.3:a:analogx:simpleserver_www:1.06