20010727 SimpleServer:WWW Command Execution Vulnerability Exploit Code Releasedmailing list
http://seclists.org/bugtraq/2001/Jul/660 CVE-2001-1586
SimpleServer:WWW 1.0.7/1.0.8/1.13 - Hex Encoded URL Directory Traversal
Record summary
CVE-2001-1586 has a selected CVSS score of 10.0; EIP currently links 1 catalogued exploit.
Description
Directory traversal vulnerability in SimpleServer:WWW 1.13 and earlier allows remote attackers to execute arbitrary programs via encoded ../ ("%2E%2E%2F%") sequences in a request to the cgi-bin/ directory, a different vulnerability than CVE-2000-0664.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBSimpleServer:WWW 1.0.7/1.0.8/1.13 - Hex Encoded URL Directory TraversalExploitDB exploitby THRANNot analyzed1 file
References
6analogx.comConfirmation
http://www.analogx.com/contents/download/network/sswww.htm securiteam.com
http://www.securiteam.com/windowsntfocus/5TP0B1P4UK.html 3112vdb entry
http://www.securityfocus.com/bid/3112 simpleserverwww-cgibin-directory-traversal(56631)vdb entry
https://exchange.xforce.ibmcloud.com/vulnerabilities/56631 nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2001-1586