CVE-2001-1139

Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. (dot dot) in the server request.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2001-08-22

Last modified

2024-08-08

Affected products

• Winwrapper Professional (Ascii Nt)

References

• http://www.iss.net/security_center/static/7015.php
• http://www.securityfocus.com/archive/1/209414
• http://www.securityfocus.com/bid/3219
• http://www.tsc.ant.co.jp/products/download.htm