CVE-2000-0664

AnalogX SimpleServer:WWW <1.06 - Path Traversal

Title source: llm

Description

AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack that uses the %2E URL encoding for the dots.

Exploits (1)

exploitdb WORKING POC VERIFIED

by Foundstone Inc. · textremotewindows

https://www.exploit-db.com/exploits/20103

View Code ZIP pw:eip

References (5)

Core 5

Core References

Various Sources x_refsource_confirm

http://www.analogx.com/contents/download/network/sswww.htm

Exploit, Patch, Vendor Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2000-07/0374.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/1508

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/4999

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/388

Scores

EPSS 0.0553

EPSS Percentile 90.3%

Details

Status published

Products (1)

analogx/simpleserver_www 1.0.6

Published Jul 26, 2000

Tracked Since Feb 18, 2026