CVE-2002-1079

Abyss Web Server 1.0.3 - Path Traversal

Title source: llm

Description

Directory traversal vulnerability in Abyss Web Server 1.0.3 allows remote attackers to read arbitrary files via ..\ (dot-dot backslash) sequences in an HTTP GET request.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Auriemma Luigi · textremotewindows

https://www.exploit-db.com/exploits/21735

View Code ZIP pw:eip

References (6)

Core 6

Core References

Various Sources x_refsource_confirm

http://www.aprelium.com/news/patch1033.html

Third Party Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2002-08/0229.html

Patch, Vendor Advisory vdb-entry x_refsource_xf

http://www.iss.net/security_center/static/9940.php

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/3285

Patch, Vendor Advisory vdb-entry x_refsource_xf

http://www.iss.net/security_center/static/9941.php

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/5547

Scores

EPSS 0.1344

EPSS Percentile 94.2%

Details

Status published

Products (1)

aprelium_technologies/abyss_web_server 1.0.3_p2

Published Oct 04, 2002

Tracked Since Feb 18, 2026