CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register
  Take a third party risk management course for FREE
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In 2001(Directory Traversal)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2001-1580 Dir. Trav. 2001-12-31 2017-12-19
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to read arbitrary files via ".." sequences in the query string.
2 CVE-2001-1544 Dir. Trav. 2001-12-31 2008-09-05
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in Macromedia JRun Web Server (JWS) 2.3.3, 3.0 and 3.1 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP GET request.
3 CVE-2001-1525 Dir. Trav. 2001-12-31 2008-09-05
5.0
 None Remote Low Not required None Partial None
Directory traversal vulnerability in the comments action in easyNews 1.5 and earlier allows remote attackers to modify news.dat, template.dat and possibly other files via a ".." in the cid parameter.
4 CVE-2001-1461 Dir. Trav. 2001-10-22 2017-07-11
7.5
 None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in WebID in RSA Security SecurID 5.0 as used by ACE/Agent for Windows, Windows NT and Windows 2000 allows attackers to access restricted resources via URL-encoded (1) /.. or (2) \.. sequences.
5 CVE-2001-1458 Dir. Trav. 2001-10-15 2017-07-11
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in Novell GroupWise 5.5 and 6.0 allows remote attackers to read arbitrary files via a request for /servlet/webacc?User.html= that contains "../" (dot dot) sequences and a null character.
6 CVE-2001-1432 22 Dir. Trav. 2001-12-29 2017-07-11
7.8
 None Remote Low Not required Complete None None
Directory traversal vulnerability in Cherokee Web Server allows remote attackers to read arbitrary files via a .. (dot dot) in the URL.
7 CVE-2001-1408 Dir. Trav. 2001-07-05 2017-12-19
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in readmsg.php in WebMail 2.0.1 in Cobalt Qube 3 allows remote attackers to read arbitrary files via a .. (dot dot) in the mailbox parameter.
8 CVE-2001-1335 Dir. Trav. 2001-05-27 2008-09-10
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in CesarFTP 0.98b and earlier allows remote authenticated users (such as anonymous) to read arbitrary files via a GET with a filename that contains a ...%5c (modified dot dot).
9 CVE-2001-1295 Dir. Trav. 2001-08-21 2008-09-05
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in Cerberus FTP Server 1.5 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the CD command.
10 CVE-2001-1285 Dir. Trav. 2001-10-12 2008-09-10
5.0
 None Remote Low Not required None Partial None
Directory traversal vulnerability in readmail.cgi for Ipswitch IMail 7.04 and earlier allows remote attackers to access the mailboxes of other users via a .. (dot dot) in the mbx parameter.
11 CVE-2001-1271 Dir. Trav. 2001-07-12 2008-09-05
2.1
 None Local Low Not required None Partial None
Directory traversal vulnerability in rar 2.02 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) attack on archived filenames.
12 CVE-2001-1270 Dir. Trav. 2001-07-12 2008-09-05
2.1
 None Local Low Not required None Partial None
Directory traversal vulnerability in the console version of PKZip (pkzipc) 4.00 and earlier allows attackers to overwrite arbitrary files during archive extraction with the -rec (recursive) option via a .. (dot dot) attack on the archived files.
13 CVE-2001-1268 Dir. Trav. 2001-07-12 2010-05-25
2.1
 None Local Low Not required None Partial None
Directory traversal vulnerability in Info-ZIP UnZip 5.42 and earlier allows attackers to overwrite arbitrary files during archive extraction via a .. (dot dot) in an extracted filename.
14 CVE-2001-1267 Dir. Trav. 2001-07-12 2008-09-05
2.1
 None Local Low Not required None Partial None
Directory traversal vulnerability in GNU tar 1.13.19 and earlier allows local users to overwrite arbitrary files during archive extraction via a tar file whose filenames contain a .. (dot dot).
15 CVE-2001-1266 Dir. Trav. 2001-07-03 2008-09-05
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in Doug Neal's HTTPD Daemon (DNHTTPD) before 0.4.1 allows remote attackers to view arbitrary files via a .. (dot dot) attack using the dot hex code '%2E'.
16 CVE-2001-1265 Dir. Trav. 2001-07-20 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in IBM alphaWorks Java TFTP server 1.21 allows remote attackers to conduct unauthorized operations on arbitrary files via a .. (dot dot) attack.
17 CVE-2001-1242 Exec Code Dir. Trav. 2001-07-17 2008-09-10
7.5
 None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in Un-CGI 1.9 and earlier allows remote attackers to execute arbitrary code via a .. (dot dot) in an HTML form.
18 CVE-2001-1217 Dir. Trav. 2001-12-21 2008-09-05
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in PL/SQL Apache module in Oracle Oracle 9i Application Server allows remote attackers to access sensitive information via a double encoded URL with .. (dot dot) sequences.
19 CVE-2001-1209 Dir. Trav. 2001-12-31 2009-04-30
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in zml.cgi allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter.
20 CVE-2001-1205 22 Dir. Trav. 2001-12-30 2016-10-18
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in lastlines.cgi for Last Lines 2.0 allows remote attackers to read arbitrary files via '..' sequences in the $error_log variable.
21 CVE-2001-1204 Dir. Trav. 2001-12-28 2017-07-11
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in phprocketaddin in Total PC Solutions PHP Rocket Add-in for FrontPage 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the page parameter.
22 CVE-2001-1196 +Priv Dir. Trav. 2001-12-17 2016-10-18
10.0
 None Remote Low Not required Complete Complete Complete
Directory traversal vulnerability in edit_action.cgi of Webmin Directory 0.91 allows attackers to gain privileges via a '..' (dot dot) in the argument.
23 CVE-2001-1193 Dir. Trav. 2001-12-13 2017-10-10
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in EFTP 2.0.8.346 allows local users to read directories via a ... (modified dot dot) in the CWD command.
24 CVE-2001-1168 Dir. Trav. 2001-08-29 2008-09-10
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in index.php in PhpMyExplorer before 1.2.1 allows remote attackers to read arbitrary files via a ..%2F (modified dot dot) in the chemin parameter.
25 CVE-2001-1162 Dir. Trav. 2001-06-23 2017-10-10
10.0
 None Remote Low Not required Complete Complete Complete
Directory traversal vulnerability in the %m macro in the smb.conf configuration file in Samba before 2.2.0a allows remote attackers to overwrite certain files via a .. in a NETBIOS name, which is used as the name for a .log file.
26 CVE-2001-1144 Dir. Trav. 2001-07-11 2013-08-17
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in McAfee ASaP VirusScan agent 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTTP request.
27 CVE-2001-1139 Dir. Trav. 2001-08-22 2008-09-05
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in ASCII NT WinWrapper Professional allows remote attackers to read arbitrary files via a .. (dot dot) in the server request.
28 CVE-2001-1138 Exec Code Dir. Trav. 2001-09-07 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in r.pl (aka r.cgi) of Randy Parker Power Up HTML 0.8033beta allows remote attackers to read arbitrary files and possibly execute arbitrary code via a .. (dot dot) in the FILE parameter.
29 CVE-2001-1131 Dir. Trav. 2001-08-21 2008-09-05
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in WhitSoft Development SlimFTPd 2.2 allows an attacker to read arbitrary files and directories via a ... (modified dot dot) in the CD command.
30 CVE-2001-1109 Dir. Trav. 2001-09-12 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in EFTP 2.0.7.337 allows remote authenticated users to reveal directory contents via a .. (dot dot) in the (1) LIST, (2) QUOTE SIZE, and (3) QUOTE MDTM commands.
31 CVE-2001-1108 Dir. Trav. 2001-07-26 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in SnapStream PVS 1.2a allows remote attackers to read arbitrary files via a .. (dot dot) attack in the requested URL.
32 CVE-2001-1082 Dir. Trav. 2001-07-13 2008-09-05
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in Livingston/Lucent RADIUS before 2.1.va.1 may allow attackers to read arbitrary files via a .. (dot dot) attack.
33 CVE-2001-1045 Dir. Trav. 2001-07-06 2017-12-19
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in basilix.php3 in Basilix Webmail 1.0.3beta and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the request_id[DUMMY] parameter.
34 CVE-2001-1031 Dir. Trav. 2001-09-27 2017-12-19
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in Meteor FTP 1.0 allows remote attackers to read arbitrary files via (1) a .. (dot dot) in the ls/LIST command, or (2) a ... in the cd/CWD command.
35 CVE-2001-1019 Dir. Trav. 2001-09-08 2017-12-19
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in view_item CGI program in sglMerchant 1.0 allows remote attackers to read arbitrary files via a .. (dot dot) in the HTML_FILE parameter.
36 CVE-2001-1010 Dir. Trav. 2001-07-22 2017-10-10
5.0
 None Remote Low Not required None Partial None
Directory traversal vulnerability in pagecount CGI script in Sambar Server before 5.0 beta 5 allows remote attackers to overwrite arbitrary files via a .. (dot dot) attack on the page parameter.
37 CVE-2001-0982 Dir. Trav. 2001-07-23 2017-10-10
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in IBM Tivoli WebSEAL Policy Director 3.01 through 3.7.1 allows remote attackers to read arbitrary files or directories via encoded .. (dot dot) sequences containing "%2e" strings.
38 CVE-2001-0971 Dir. Trav. 2001-08-31 2008-09-05
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in ACI 4d webserver allows remote attackers to read arbitrary files via a .. (dot dot) or drive letter (e.g., C:) in an HTTP request.
39 CVE-2001-0966 Dir. Trav. 2001-08-31 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
Directory traversal vulnerability in Nudester 1.10 and earlier allows remote attackers to read or write arbitrary files via a .. (dot dot) in the CD (CWD) command.
40 CVE-2001-0963 Dir. Trav. 2001-09-20 2017-10-10
7.5
 None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in SpoonFTP 1.1 allows local and sometimes remote attackers to access files outside of the FTP root via a ... (modified dot dot) in the CD (CWD) command.
41 CVE-2001-0938 Dir. Trav. 2001-11-30 2016-10-18
6.4
 None Remote Low Not required Partial Partial None
Directory traversal vulnerability in AspUpload 2.1, in certain configurations, allows remote attackers to upload and read arbitrary files, and list arbitrary directories, via a .. (dot dot) in the Filename parameter in (1) UploadScript11.asp or (2) DirectoryListing.asp.
42 CVE-2001-0931 Dir. Trav. 2001-11-28 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in Cooolsoft PowerFTP Server 2.03 allows attackers to list or read arbitrary files and directories via a .. (dot dot) in (1) LS or (2) GET.
43 CVE-2001-0925 22 Dir. Trav. 2001-03-12 2021-07-06
5.0
 None Remote Low Not required Partial None None
The default installation of Apache before 1.3.19 allows remote attackers to list directories instead of the multiview index.html file via an HTTP request for a path that contains many / (slash) characters, which causes the path to be mishandled by (1) mod_negotiation, (2) mod_dir, or (3) mod_autoindex.
44 CVE-2001-0924 Dir. Trav. 2001-11-22 2017-12-19
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in ifx CGI program in Informix Web DataBlade allows remote attackers to read arbitrary files via a .. (dot dot) in the LO parameter.
45 CVE-2001-0900 Dir. Trav. 2001-11-18 2017-10-10
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in modules.php in Gallery before 1.2.3 allows remote attackers to read arbitrary files via a .. (dot dot) in the include parameter.
46 CVE-2001-0871 Exec Code Dir. Trav. 2001-12-21 2017-12-19
7.5
 None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in HTTP server for Alchemy Eye and Alchemy Network Monitor allows remote attackers to execute arbitrary commands via an HTTP request containing (1) a .. in versions 2.0 through 2.6.18, or (2) a DOS device name followed by a .. in versions 2.6.19 through 3.0.10.
47 CVE-2001-0853 Dir. Trav. 2001-12-06 2017-07-11
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in Entrust GetAccess allows remote attackers to read arbitrary files via a .. (dot dot) in the locale parameter to (1) helpwin.gas.bat or (2) AboutBox.gas.bat.
48 CVE-2001-0842 +Priv Dir. Trav. 2001-12-06 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in Search.cgi in Leoboard LB5000 LB5000II 1029 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.
49 CVE-2001-0841 +Priv Dir. Trav. 2001-12-06 2016-10-18
7.5
 None Remote Low Not required Partial Partial Partial
Directory traversal vulnerability in Search.cgi in Ikonboard ib219 and earlier allows remote attackers to overwrite files and gain privileges via .. (dot dot) sequences in the amembernamecookie cookie.
50 CVE-2001-0805 Dir. Trav. 2001-12-06 2017-10-10
5.0
 None Remote Low Not required Partial None None
Directory traversal vulnerability in ttawebtop.cgi in Tarantella Enterprise 3.00 and 3.01 allows remote attackers to read arbitrary files via a .. (dot dot) in the pg parameter.
Total number of vulnerabilities : 124   Page : 1 (This Page)2 3
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.