Unscored CVE-2001-0674 EUVD-2001-0660GHSA-r37v-9rmc-jc9m

Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a hexadec…

Published Aug 29, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a hexadecimal encoded dot-dot attack (eg. http://www.server.com/%2e%2e/%2e%2e) in an HTTP URL request.

References

viking-hex-directory-traversal(6394) vdb-entry
20010417 Advisory for Viking mailing-list
http://www.robtex.com/viking/bugs.htm