Unscored severity · published Aug 22, 2001
CVE-2001-0633
Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '..' (dot dot) attack in the…
–
CVSS
2%
EPSS
No
On KEV
Description
Directory traversal vulnerability in Sun Chili!Soft ASP on multiple Unixes allows a remote attacker to read arbitrary files above the web root via a '..' (dot dot) attack in the sample script 'codebrws.asp'.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.0% · higher than 81% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CH
Chilisoft · Sun
through 3.5.2 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-0633
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-0633
Vendor Advisory
http://archives.neohapsis.com/archives/bugtraq/2001-02/0378.html
Patch
http://archives.neohapsis.com/archives/bugtraq/2001-02/0443.html
More from Chilisoft
–
CVE-2001-0632
Sun Chili!Soft 3.5.2 on Linux and 3.6 on AIX creates a default admin username and password in the default installation, which can allow a remote attacker to gain additional…
–
CVE-2001-0634
Sun Chili!Soft ASP has weak permissions on various configuration files, which allows a local attacker to gain additional privileges and create a denial of service
–
CVE-2001-0229
Chili!Soft ASP for Linux before 3.6 does not properly set group privileges when running in inherited mode, which could allow attackers to gain privileges via malicious scripts