CVE-2002-0288
Phusion Web Server 1.0 - Directory Traversal via Triple Dot Sequence
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2002-0288. PoCs published by Alex Hernandez, alt3kx.
AI-analyzed exploit summary This Perl script exploits a directory traversal vulnerability in Phusion Webserver v1.0 by using triple-dot-slash sequences with HTTP-encoded variations to access files outside the webroot. It constructs a URL to fetch sensitive files like 'sam._' from the target system.
Description
Directory traversal vulnerability in Phusion web server 1.0 allows remote attackers to read arbitrary files via a ... (triple dot dot) in the HTTP request.
Exploits (3)
This Perl script exploits a directory traversal vulnerability in Phusion Webserver v1.0 by using triple-dot-slash sequences with HTTP-encoded variations to access files outside the webroot. It constructs a URL to fetch sensitive files like 'sam._' from the target system.
This Perl script tests for a directory traversal vulnerability in Phusion Webserver v1.0 by sending multiple HTTP requests with encoded traversal sequences to access 'cmd.exe' and execute a directory listing command. It checks for the presence of the word 'Directory' in the response to determine vulnerability.
The repository contains only a README with references to Exploit-DB entries for CVE-2002-0288 but no actual exploit code or technical details. It serves as a placeholder without functional PoC or analysis.