The Administration console for Abyss Web Server 1.0.3 allows remote attackers to read files without providing login credentials via an HTTP request to a target file that ends in a "+" character.
References
Configurations
Configuration 1 (hide)
|
History
20 Nov 2024, 23:40
Type | Values Removed | Values Added |
---|---|---|
References | () http://archives.neohapsis.com/archives/bugtraq/2002-08/0229.html - | |
References | () http://www.aprelium.com/news/patch1033.html - | |
References | () http://www.iss.net/security_center/static/9956.php - Patch, Vendor Advisory | |
References | () http://www.osvdb.org/3286 - | |
References | () http://www.securityfocus.com/bid/5549 - |
Information
Published : 2002-10-04 04:00
Updated : 2024-11-20 23:40
NVD link : CVE-2002-1081
Mitre link : CVE-2002-1081
CVE.ORG link : CVE-2002-1081
JSON object : View
Products Affected
aprelium_technologies
- abyss_web_server
CWE