CVE-2003-1172

Apache Cocoon 2.1-2.2 - Directory Traversal via View-Source Filename Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2003-1172. PoCs published by Thierry De Leeuw.

AI-analyzed exploit summary This is a writeup describing a directory traversal vulnerability in Apache Cocoon. The issue allows attackers to access files outside the server root directory via the 'filename' parameter in the 'view-source' script.

Description

Directory traversal vulnerability in the view-source sample file in Apache Software Foundation Cocoon 2.1 and 2.2 allows remote attackers to access arbitrary files via a .. (dot dot) in the filename parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Thierry De Leeuw · textremotemultiple

https://www.exploit-db.com/exploits/23282

View Code ZIP pw:eip

This is a writeup describing a directory traversal vulnerability in Apache Cocoon. The issue allows attackers to access files outside the server root directory via the 'filename' parameter in the 'view-source' script.

Classification

Writeup 90%

Attack Type

Info Leak

Complexity

Trivial

Reliability

Reliable

Target: Apache Cocoon version 2.1 and 2.2 before 22 Oct 2003

No auth needed

Prerequisites: Access to the vulnerable Apache Cocoon instance

MITRE ATT&CK