CVE-2003-0839

Directory traversal vulnerability in the "Shell Folders" capability in Microsoft Windows Server 2003 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a "shell:" link.

Score

CVSS 2.0 5.0 Medium

Status

Modified - cve@mitre.org

Published

2003-11-17

Last modified

2024-08-08

Affected products

• Windows 2003 Server (Microsoft)

References

• http://marc.info/?l=bugtraq&m=106563075612028&w=2
• http://www.geocities.co.jp/SiliconValley/1667/advisory08e.html