CVE-2001-0215: Martin Hamilton ROADS 2.3

Record summary

CVE-2001-0215 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.

Description

ROADS search.pl program allows remote attackers to read arbitrary files by specifying the file name in the form parameter and terminating the filename with a null byte.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits: 1

Proofs of concept

Catalogued exploits

ExploitDBMartin Hamilton ROADS 2.3 - File DisclosureExploitDB exploitby cuctemaNot analyzed1 file

ExploitDB

PoC details

References

20010212 ROADS search system "show files" Vulnerability with "null bite" bugmailing list

http://archives.neohapsis.com/archives/bugtraq/2001-02/0213.html

roads.lut.ac.ukConfirmation

http://www.roads.lut.ac.uk/lists/open-roads/2001/02/0001.html

2371vdb entry

http://www.securityfocus.com/bid/2371

roads-search-view-files(6097)vdb entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/6097

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2001-0215