header-logo
Suggest Exploit
vendor:
SimpleServer
by:
SecurityFocus
7.5
CVSS
HIGH
Directory Traversal
22
CWE
Product Name: SimpleServer
Affected Version From: 01.06
Affected Version To: 01.06
Patch Exists: YES
Related CWE: CVE-2001-0206
CPE: o:simplesoftware:simpleserver:1.06
Metasploit: N/A
Other Scripts: N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References: N/A
Nuclei Metadata: N/A
Platforms Tested: None
2001

Requesting a specially formed url containing encoding (%2E) to SimpleServer 1.06 and possibley earlier versions

A directory traversal vulnerability exists in SimpleServer 1.06 and possibly earlier versions. By requesting a specially formed URL containing encoding (%2E) to the server, a remote user can gain read access to known files above the SimpleServer directory.

Mitigation:

Upgrade to the latest version of SimpleServer.
Source

Exploit-DB raw data:

source: https://www.securityfocus.com/bid/1508/info

Requesting a specially formed url containing encoding (%2E) to SimpleServer 1.06 and possibley earlier versions, will enable a remote user to gain read access to known files above the SimpleServer directory.

http://target/%2E%2E/filename

Navigation

Suggest Exploit

Services By CQR