Unscored CVE-2001-0871 EUVD-2001-0854GHSA-f7cg-5fjp-j936

Directory traversal vulnerability in HTTP server for Alchemy Eye and Alchemy Network Monitor allows remote attackers to execute arbitrary c…

Published Nov 30, 2001 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in HTTP server for Alchemy Eye and Alchemy Network Monitor allows remote attackers to execute arbitrary commands via an HTTP request containing (1) a .. in versions 2.0 through 2.6.18, or (2) a DOS device name followed by a .. in versions 2.6.19 through 3.0.10.

References

20011129 Rapid 7 Advisory R7-0001: Alchemy Eye HTTP Remote Command Execution mailing-list
alchemy-http-dot-commands(7625) vdb-entry
alchemy-http-dot-variant(7626) vdb-entry
3599 vdb-entry
VU#220715 third-party-advisory