CVE-2001-0205

Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the requested pathname, a modified .. (dot dot) attack.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2001-05-03

Last modified

2024-08-08

Affected products

• Aol Server (Aol)

References

• http://marc.info/?l=bugtraq&m=98148759123258&w=2
• http://marc.info/?l=bugtraq&m=98168216003867&w=2
• http://www.securityfocus.com/bid/2343