20010507 Advisory for A1Statsmailing list
http://archives.neohapsis.com/archives/bugtraq/2001-05/0047.html CVE-2001-0561
Drummond Miles A1Stats 1.0 - 'a1disp2.cgi' Traversal Arbitrary File Read
Record summary
CVE-2001-0561 has a selected CVSS score of 7.5; EIP currently links 3 catalogued exploits.
Description
Directory traversal vulnerability in Drummond Miles A1Stats prior to 1.6 allows a remote attacker to read arbitrary files via a '..' (dot dot) attack in (1) a1disp2.cgi, (2) a1disp3.cgi, or (3) a1disp4.cgi.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 3
Proofs of concept
3Catalogued exploits
ExploitDBDrummond Miles A1Stats 1.0 - 'a1disp2.cgi' Traversal Arbitrary File ReadExploitDB exploitby neme-dhcNot analyzed1 file
ExploitDBDrummond Miles A1Stats 1.0 - 'a1disp3.cgi' Traversal Arbitrary File ReadExploitDB exploitby neme-dhcNot analyzed1 file
ExploitDBDrummond Miles A1Stats 1.0 - 'a1disp4.cgi' Traversal Arbitrary File ReadExploitDB exploitby neme-dhcNot analyzed1 file
References
5VU#471691Third-party advisory
http://www.kb.cert.org/vuls/id/471691 2705vdb entry
http://www.securityfocus.com/bid/2705 a1stats-dot-directory-traversal(6503)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/6503 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2001-0561