CVE-2001-0674

Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a hexadecimal encoded dot-dot attack (eg. http://www.server.com/%2e%2e/%2e%2e) in an HTTP URL request.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2001-09-20

Last modified

2024-08-08

Affected products

• Viking Server (Robtex)

References

• http://www.robtex.com/viking/bugs.htm
• http://www.securityfocus.com/archive/1/177231
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6394