Unscored CVE-2002-0447 EUVD-2002-0444GHSA-j6w2-phrc-2f3m

Directory traversal vulnerability in Xerver Free Web Server 2.10 and earlier allows remote attackers to list arbitrary directories via a ..…

Published Jun 11, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in Xerver Free Web Server 2.10 and earlier allows remote attackers to list arbitrary directories via a .. (dot dot) in an HTTP GET request.

References

xerver-dot-directory-traversal(8421) vdb-entry
20020312 Xerver Free Web Server 2.10 file Disclosure & DoS PATCH (update version) mailing-list
4255 vdb-entry
20020308 Xerver-2.10-File-Disclousure&DoS-attack mailing-list