CVE-2002-1079

Abyss Web Server 1.0.3 - Path Traversal

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2002-1079. PoCs published by Auriemma Luigi.

AI-analyzed exploit summary This is a writeup describing a directory traversal vulnerability in Abyss Web Server. The vulnerability allows an attacker to escape the web root and access arbitrary system files by using URL-encoded sequences like '%5c' (backslash) and '%2e%2e' (dot-dot).

Description

Directory traversal vulnerability in Abyss Web Server 1.0.3 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in an HTTP GET request.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Auriemma Luigi · textremotewindows
https://www.exploit-db.com/exploits/21735

This is a writeup describing a directory traversal vulnerability in Abyss Web Server. The vulnerability allows an attacker to escape the web root and access arbitrary system files by using URL-encoded sequences like '%5c' (backslash) and '%2e%2e' (dot-dot).

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Reliable
Target: Abyss Web Server
No auth needed
Prerequisites: Network access to the vulnerable web server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (6)

Core 6
Core References
Various Sources x_refsource_confirm
http://www.aprelium.com/news/patch1033.html
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2002-08/0229.html
Patch, Vendor Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/9940.php
Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb
http://www.osvdb.org/3285
Patch, Vendor Advisory vdb-entry x_refsource_xf
http://www.iss.net/security_center/static/9941.php
Third Party Advisory, VDB Entry vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/5547

Scores

EPSS 0.0431
EPSS Percentile 89.9%

Details

Status published
Products (1)
aprelium_technologies/abyss_web_server 1.0.3_p2
Published Oct 04, 2002
Tracked Since Feb 18, 2026