CVE-2002-0543

Aprelium Technologies Abyss Web Server - Path Traversal

Title source: rule

Description

Directory traversal vulnerability in Aprelium Abyss Web Server (abyssws) before 1.0.0.2 allows remote attackers to read files outside the web root, including the abyss.conf file, via URL-encoded .. (dot dot) sequences in the HTTP request.

Exploits (1)

exploitdb WRITEUP

remotewindows

https://www.exploit-db.com/exploits/21367

View Code ZIP pw:eip

References (4)

[Exploit, Patch, Vendor Advisory] http://archives.neohapsis.com/archives/bugtraq/2002-04/0110.html

[Patch] http://www.aprelium.com/forum/viewtopic.php?t=24

[Patch, Vendor Advisory] http://www.iss.net/security_center/static/8805.php

[Exploit, Patch, Vendor Advisory] http://www.securityfocus.com/bid/4466

Scores

EPSS 0.1026

EPSS Percentile 93.2%

Details

Status published

Products (1)

aprelium_technologies/abyss_web_server 1.0

Published Jul 03, 2002

Tracked Since Feb 18, 2026