20010212 W3.ORG sendtemp.plmailing list
http://archives.neohapsis.com/archives/bugtraq/2001-02/0259.html CVE-2001-0272
sendtemp.pl - Read Access to Files
Record summary
CVE-2001-0272 has a selected CVSS score of 5.0; EIP currently links 1 catalogued exploit.
Description
Directory traversal vulnerability in sendtemp.pl in W3.org Anaya Web development server allows remote attackers to read arbitrary files via a .. (dot dot) attack in the templ parameter.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBsendtemp.pl - Read Access to FilesExploitDB exploitby Tom ParkerNot analyzed1 file
References
2nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2001-0272