CVE-2004-0349

GWeb HTTP Server 0.6 - Path Traversal

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-0349. PoCs published by Donato Ferrante.

AI-analyzed exploit summary The provided text describes a directory traversal vulnerability in GWeb, allowing attackers to escape the web root and access arbitrary files readable by the web server. No actual exploit code is included, only a reference to a binary exploit hosted on GitLab.

Description

Directory traversal vulnerability in GWeb HTTP Server 0.6 allows remote attackers to view arbitrary files via a .. (dot dot) in the URL.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Donato Ferrante · textremotewindows
https://www.exploit-db.com/exploits/23758

The provided text describes a directory traversal vulnerability in GWeb, allowing attackers to escape the web root and access arbitrary files readable by the web server. No actual exploit code is included, only a reference to a binary exploit hosted on GitLab.

Classification
Writeup 90%
Attack Type
Info Leak
Complexity
Trivial
Reliability
Theoretical
Target: GWeb (version not specified)
No auth needed
Prerequisites: Network access to the vulnerable GWeb server
devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Mailing List mailing-list x_refsource_bugtraq
http://marc.info/?l=bugtraq&m=107833161617397&w=2
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/15381
Exploit, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/9742

Scores

EPSS 0.0321
EPSS Percentile 86.5%

Details

Status published
Products (2)
gweb/gweb_http_server 0.5
gweb/gweb_http_server 0.6
Published Nov 23, 2004
Tracked Since Feb 18, 2026