Lucene search

MitreCVE-2001-0674

HistorySep 20, 2001 - 4:00 a.m.

CVE-2001-0674

2001-09-2004:00:00

mitre

web.nvd.nist.gov

cve-2001-0674

robtex viking

vulnerability

directory traversal

unauthorized access

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7.1

Confidence

Low

EPSS

0.003

Percentile

71.5%

JSON

Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a hexadecimal encoded dot-dot attack (eg. http://www.server.com/../..) in an HTTP URL request.

Affected configurations

Nvd

Node

robtexviking_serverRange≤1.0.7_build381

robtexviking_serverMatch1.0.4

robtexviking_serverMatch1.0.6

robtexviking_serverMatch1.0.7

VendorProductVersionCPE
robtexviking_server*cpe:2.3:a:robtex:viking_server:*:*:*:*:*:*:*:*
robtexviking_server1.0.4cpe:2.3:a:robtex:viking_server:1.0.4:*:*:*:*:*:*:*
robtexviking_server1.0.6cpe:2.3:a:robtex:viking_server:1.0.6:*:*:*:*:*:*:*
robtexviking_server1.0.7cpe:2.3:a:robtex:viking_server:1.0.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
robtex	viking_server	*	cpe:2.3:a:robtex:viking_server::::::::
robtex	viking_server	1.0.4	cpe:2.3:a:robtex:viking_server:1.0.4:::::::*
robtex	viking_server	1.0.6	cpe:2.3:a:robtex:viking_server:1.0.6:::::::*
robtex	viking_server	1.0.7	cpe:2.3:a:robtex:viking_server:1.0.7:::::::*

References

www.robtex.com/viking/bugs.htm

www.securityfocus.com/archive/1/177231

exchange.xforce.ibmcloud.com/vulnerabilities/6394

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7.1

Confidence

Low

EPSS

0.003

Percentile

71.5%

JSON

Related for CVE-2001-0674