CVE-2001-0784
icecast < 1.310 - Directory Traversal via Encoded URL Characters
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2001-0784. PoCs published by gollum.
AI-analyzed exploit summary The writeup describes a directory traversal vulnerability in Icecast due to improper filtering of encoded characters in URLs. It demonstrates how an attacker can access files outside the intended directory by using ASCII-encoded traversal sequences like '/%2E%2E/' instead of '/../'.
Description
Directory traversal vulnerability in Icecast 1.3.10 and earlier allows remote attackers to read arbitrary files via a modified .. (dot dot) attack using encoded URL characters.
Exploits (1)
The writeup describes a directory traversal vulnerability in Icecast due to improper filtering of encoded characters in URLs. It demonstrates how an attacker can access files outside the intended directory by using ASCII-encoded traversal sequences like '/%2E%2E/' instead of '/../'.