Unscored CVE-2002-1078 EUVD-2002-1066GHSA-jj2r-v8ch-wc5c

Abyss Web Server 1.0.3 allows remote attackers to list directory contents via an HTTP GET request that ends in a large number of / (slash) …

Published Aug 31, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

Abyss Web Server 1.0.3 allows remote attackers to list directory contents via an HTTP GET request that ends in a large number of / (slash) characters.

References

5345 vdb-entry
abyss-slash-directory-traversal(9721) vdb-entry
20020729 [VulnWatch] Abyss Web Server version 1.0.3 shows file and directory content mailing-list
20020729 Abyss Web Server version 1.0.3 shows file and directory content mailing-list