Unscored severity · published Dec 31, 2001
CVE-2001-1580
Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to read arbitrary files via ".." sequences in the query string
–
CVSS
2.9%
EPSS
No
On KEV
Description
Directory traversal vulnerability in ScriptEase viewcode.jse for Netware 5.1 before 5.1 SP3 allows remote attackers to read arbitrary files via ".." sequences in the query string.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.9% · higher than 87% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NE
Netware · Novell
5.1; 5.1 · source: NVD
SW
Scriptease Webserver · Nombas
4.30b; 4.30d · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2001-1580
CVE.org
https://www.cve.org/CVERecord?id=CVE-2001-1580
Exploit
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-12/0204.html
www.derkeiler.com
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-12/0218.html
www.derkeiler.com
http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2001-12/0221.html
Patch
http://www.securityfocus.com/bid/3715
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/7726
More from Scriptease Webserver
–
CVE-2002-0323
comment2.jse in ScriptEase:WebServer allows remote attackers to read arbitrary files by specifying the target file as an argument in the URL
–
CVE-2002-0297
Buffer overflow in ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long URL in an HTTP…
–
CVE-2002-0298
ScriptEase MiniWeb Server 0.95 allows remote attackers to cause a denial of service (crash) via certain HTTP GET requests containing (1) a %2e%2e (encoded dot-dot), (2) several…