CVE-2004-2516

Directory traversal vulnerability in myServer 0.7 allows remote attackers to list arbitrary directories via an HTTP GET command with a large number of "./" sequences followed by "../" sequences.
Configurations

Configuration 1 (hide)

cpe:2.3:a:myserver:myserver:*:*:*:*:*:*:*:*

History

20 Nov 2024, 23:53

Type Values Removed Values Added
References () http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0052.html - Patch () http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0052.html - Patch
References () http://secunia.com/advisories/12561 - Vendor Advisory () http://secunia.com/advisories/12561 - Vendor Advisory
References () http://securitytracker.com/id?1011278 - Exploit () http://securitytracker.com/id?1011278 - Exploit
References () http://sourceforge.net/project/shownotes.php?release_id=267444 - Patch () http://sourceforge.net/project/shownotes.php?release_id=267444 - Patch
References () http://www.osvdb.org/10001 - Exploit () http://www.osvdb.org/10001 - Exploit
References () http://www.securityfocus.com/bid/11189 - Exploit, Patch () http://www.securityfocus.com/bid/11189 - Exploit, Patch
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/17390 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/17390 -

Information

Published : 2004-12-31 05:00

Updated : 2024-11-20 23:53


NVD link : CVE-2004-2516

Mitre link : CVE-2004-2516

CVE.ORG link : CVE-2004-2516


JSON object : View

Products Affected

myserver

  • myserver