CVE-2002-1178
Jetty HTTP Server < 4.1.0 - Directory Traversal via CGIServlet
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2002-1178. PoCs published by Matt Moore.
AI-analyzed exploit summary This exploit leverages a directory traversal vulnerability in Jetty's CGIServlet to execute arbitrary commands on Windows systems. The attacker can traverse directories and execute system binaries like notepad.exe.
Description
Directory traversal vulnerability in the CGIServlet for Jetty HTTP server before 4.1.0 allows remote attackers to execute arbitrary commands via ..\ (dot-dot backslash) sequences in an HTTP request to the cgi-bin directory.
Exploits (1)
This exploit leverages a directory traversal vulnerability in Jetty's CGIServlet to execute arbitrary commands on Windows systems. The attacker can traverse directories and execute system binaries like notepad.exe.