CVE-2002-1081
- State
- Published
- Severity
- Not scored
- Published
- Apr 2, 2003
- Updated
- Aug 8, 2024
- Reserved
- Aug 30, 2002
Description
The Administration console for Abyss Web Server 1.0.3 allows remote attackers to read files without providing login credentials via an HTTP request to a target file that ends in a "+" character.
Scores
The record has no CVSS score.
Weaknesses
The record names no weakness.
Affected Products
| Product | Versions |
|---|---|
n/an/a |
|
References
- http://www.aprelium.com/news/patch1033.html
- 20020822 Abyss 1.0.3 directory traversal and administration bugsmailing-list
- 3286vdb-entry
- 5549vdb-entry
- abyss-plus-file-disclosure(9956)vdb-entry
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.