Exploitation Summary
EIP tracks 1 public exploit for CVE-2000-0664. PoCs published by Foundstone Inc..
AI-analyzed exploit summary This exploit leverages a directory traversal vulnerability in SimpleServer 1.06 (and possibly earlier) by using URL-encoded dot-dot-slash sequences (%2E%2E/) to access files outside the intended directory. The PoC demonstrates how an attacker can read arbitrary files by manipulating the URL path.
Description
AnalogX SimpleServer:WWW 1.06 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack that uses the %2E URL encoding for the dots.
Exploits (1)
This exploit leverages a directory traversal vulnerability in SimpleServer 1.06 (and possibly earlier) by using URL-encoded dot-dot-slash sequences (%2E%2E/) to access files outside the intended directory. The PoC demonstrates how an attacker can read arbitrary files by manipulating the URL path.