Unscored CVE-2003-0475 EUVD-2003-0469GHSA-q698-95rj-9cwq

Directory traversal vulnerability in iWeb Server 2 allows remote attackers to read arbitrary files via an HTTP request containing URL-encod…

Published Jun 28, 2003 · Updated Aug 8, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in iWeb Server 2 allows remote attackers to read arbitrary files via an HTTP request containing URL-encoded .. sequences ("%5c%2e%2e"), a different vulnerability than CVE-2003-0474.

References

20030623 TA-2003-06 Directory Transversal Vulnerability in iWeb Server 2 mailing-list
20030627 Re: TA-2003-06 Directory Transversal Vulnerability in iWeb Server mailing-list