Unscored severity · published May 2, 2005
CVE-2005-0450
Directory traversal vulnerability in Sami HTTP Server 1.0.5 allows remote attackers to read arbitrary files via an HTTP request containing (1)
–
CVSS
3.1%
EPSS
No
On KEV
Description
Directory traversal vulnerability in Sami HTTP Server 1.0.5 allows remote attackers to read arbitrary files via an HTTP request containing (1) .. (dot dot) or (2) "%2e%2e" (encoded dot dot) sequences.
Exploitation
Is it being used?
Exploit prediction (EPSS)3.1% · higher than 88% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
SH
Sami Http Server · Sami
1.0.5 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2005-0450
CVE.org
https://www.cve.org/CVERecord?id=CVE-2005-0450
Vendor Advisory
http://secunia.com/advisories/14283
Exploit
http://securitytracker.com/id?1013191
More from Sami Http Server
–
CVE-2005-0451
Sami HTTP Server 1.0.5 allows remote attackers to cause a denial of service via an HTTP request containing two CRLF sequences, which triggers a NULL dereference