Lucene search
MitreCVE-2001-1586HistoryFeb 12, 2010 - 9:30 p.m.
CVE-2001-1586
2010-02-1221:30:00
CWE-22
mitre
web.nvd.nist.gov
24
cve-2001-1586
simpleserver:www 1.13
vulnerability
remote attack
cgi-bin
directory traversal
nvd.
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
Low
EPSS
0.023
Percentile
89.7%
Directory traversal vulnerability in SimpleServer:WWW 1.13 and earlier allows remote attackers to execute arbitrary programs via encoded …/ (“%2E%2E%2F%”) sequences in a request to the cgi-bin/ directory, a different vulnerability than CVE-2000-0664.
Affected configurations
Node
analogxsimpleserver_wwwRange≤1.13
ORanalogxsimpleserver_wwwMatch1.0.8
ORanalogxsimpleserver_wwwMatch1.01
ORanalogxsimpleserver_wwwMatch1.03
ORanalogxsimpleserver_wwwMatch1.04
ORanalogxsimpleserver_wwwMatch1.05
ORanalogxsimpleserver_wwwMatch1.06
| Vendor | Product | Version | CPE |
|---|---|---|---|
| analogx | simpleserver_www | * | cpe:2.3:a:analogx:simpleserver_www:*:*:*:*:*:*:*:* |
| analogx | simpleserver_www | 1.0.8 | cpe:2.3:a:analogx:simpleserver_www:1.0.8:*:*:*:*:*:*:* |
| analogx | simpleserver_www | 1.01 | cpe:2.3:a:analogx:simpleserver_www:1.01:*:*:*:*:*:*:* |
| analogx | simpleserver_www | 1.03 | cpe:2.3:a:analogx:simpleserver_www:1.03:*:*:*:*:*:*:* |
| analogx | simpleserver_www | 1.04 | cpe:2.3:a:analogx:simpleserver_www:1.04:*:*:*:*:*:*:* |
| analogx | simpleserver_www | 1.05 | cpe:2.3:a:analogx:simpleserver_www:1.05:*:*:*:*:*:*:* |
| analogx | simpleserver_www | 1.06 | cpe:2.3:a:analogx:simpleserver_www:1.06:*:*:*:*:*:*:* |
Related
cvelist
cvelist
CVE-2001-1586
2010-02-12 21:00:00
CVE-2000-0664
2000-10-13 04:00:00
nvd
nvd
CVE-2001-1586
2010-02-12 21:30:00
CVE-2000-0664
2000-07-26 04:00:00
nessus
nessus
SimpleServer:WWW Encoded Traversal Arbitrary Command Execution
2001-07-17 00:00:00
AnalogX SimpleServer:WWW Encoded Traversal Arbitrary File Access
2000-08-06 00:00:00
openvas
openvas
SimpleServer remote execution
2005-11-03 00:00:00
SimpleServer remote execution
2005-11-03 00:00:00
exploitdb
exploitdb
SimpleServer:WWW 1.0.7/1.0.8/1.13 - Hex Encoded URL Directory Traversal
2001-07-26 00:00:00
AnalogX SimpleServer:WWW 1.0.6 - Directory Traversal
2000-07-26 00:00:00
cve
cve
CVE-2000-0664
2000-10-13 04:00:00
CVSS2
10
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:N/AC:L/Au:N/C:C/I:C/A:C
AI Score
7.5
Confidence
Low
EPSS
0.023
Percentile
89.7%
Related for CVE-2001-1586