Exploitation Summary
EIP tracks 1 public exploit for CVE-2001-1108. PoCs published by [email protected].
AI-analyzed exploit summary This is a writeup describing a directory traversal vulnerability in Snapstream Personal Video Station. It explains how an attacker can access arbitrary files by using '../' sequences in HTTP requests.
Description
Directory traversal vulnerability in SnapStream PVS 1.2a allows remote attackers to read arbitrary files via a .. (dot dot) attack in the requested URL.
Exploits (1)
exploitdb
WRITEUP
VERIFIED
https://www.exploit-db.com/exploits/21030
This is a writeup describing a directory traversal vulnerability in Snapstream Personal Video Station. It explains how an attacker can access arbitrary files by using '../' sequences in HTTP requests.
Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target:
Snapstream Personal Video Station
No auth needed
Prerequisites:
Network access to the target system · Snapstream PVS web interface exposed on port 8129
MITRE ATT&CK
mistral-large-3 · analyzed Feb 16, 2026
Full analysis →
References (5)
Core 5
Core References
Various Sources x_refsource_confirm
http://discuss.snapstream.com/ubb/Forum1/HTML/000216.html
Vendor Advisory mailing-list
x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2001-07/0606.html
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/6917
Exploit, Vendor Advisory vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/3100
Third Party Advisory, VDB Entry vdb-entry
x_refsource_osvdb
http://www.osvdb.org/2080
Scores
EPSS
0.0282
EPSS Percentile
85.2%
Details
Status
published
Products (1)
snapstream/pvs
1.2a
Published
Jul 26, 2001
Tracked Since
Feb 18, 2026