Exploitation Summary
EIP tracks 1 public exploit for CVE-1999-1082.
AI-analyzed exploit summary The exploit demonstrates a directory traversal vulnerability in the Jana webserver by using multiple dots in the URL to access files outside the webroot, such as win.ini or autoexec.bat. The attack leverages improper path sanitization to bypass intended access restrictions.
Description
Directory traversal vulnerability in Jana proxy web server 1.40 allows remote attackers to ready arbitrary files via a "......" (modified dot dot) attack.
Exploits (1)
The exploit demonstrates a directory traversal vulnerability in the Jana webserver by using multiple dots in the URL to access files outside the webroot, such as win.ini or autoexec.bat. The attack leverages improper path sanitization to bypass intended access restrictions.