Unscored severity · published Dec 31, 2004
CVE-2004-2112
Directory traversal vulnerability in BremsServer 1.2.4 allows remote attackers to read arbitrary files via ".." (dot dot) sequences in the URL
–
CVSS
3.6%
EPSS
No
On KEV
Description
Directory traversal vulnerability in BremsServer 1.2.4 allows remote attackers to read arbitrary files via ".." (dot dot) sequences in the URL.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.6% · higher than 89% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BR
Bremsserver · Herberlin
1.2.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2004-2112
CVE.org
https://www.cve.org/CVERecord?id=CVE-2004-2112
marc.info
http://marc.info/?l=bugtraq&m=107513747107031&w=2
secunia.com
http://secunia.com/advisories/10731
www.osvdb.org
http://www.osvdb.org/3755
Exploit
http://www.securityfocus.com/bid/9493
www.securitytracker.com
http://www.securitytracker.com/id?1008853
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/14954
More from Bremsserver
–
CVE-2004-2113
Cross-site scripting (XSS) vulnerability in BremsServer 1.2.4 allows remote attackers to inject arbitrary web script or HTML via the URL