CVE-2003-1529

Seagull Software Systems J Walk Application Server < 3.3c4 - Path Traversal via Encoded Dot Dot

Title source: llm

Description

Directory traversal vulnerability in Seagull Software Systems J Walk application server 3.2C9, and other versions before 3.3c4, allows remote attackers to read arbitrary files via a ".%252e" (encoded dot dot) in the URL.

References (7)

Core 7

Core References

Vendor Advisory third-party-advisory x_refsource_secunia

http://secunia.com/advisories/8411

Third Party Advisory mailing-list x_refsource_bugtraq

http://archives.neohapsis.com/archives/bugtraq/2003-03/0357.html

Third Party Advisory, VDB Entry vdb-entry x_refsource_bid

http://www.securityfocus.com/bid/7160

Vendor Advisory x_refsource_misc

http://www.irmplc.com/advisory/adv5.htm

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://www.securitytracker.com/id?1006378

Third Party Advisory, VDB Entry vdb-entry x_refsource_osvdb

http://www.osvdb.org/4927

Third Party Advisory, VDB Entry vdb-entry x_refsource_xf

https://exchange.xforce.ibmcloud.com/vulnerabilities/11623

Scores

EPSS 0.0184

EPSS Percentile 76.4%

Details

CWE

CWE-22

Status published

Products (1)

seagull_software_systems/j_walk_application_server 3.2c9

Published Dec 31, 2003

Tracked Since Feb 18, 2026