Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2002-1829 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-08T03:43:32.880Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in codeparse.php in Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to inject arbitrary web script or HTML via (1) myhome.php, (2) an onerror attribute in an IMG tag (a variant of CVE-2002-0330), or (3) a glow tag. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=vuln-dev&m=102221487407632&w=2 - http://www.securityfocus.com/bid/4819 - https://exchange.xforce.ibmcloud.com/vulnerabilities/9160
CVE ID: CVE-2002-1830 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-08T03:43:32.670Z Vendors: n/a Products: n/a Problem Types: n/a Description: Open Bulletin Board (OpenBB) 1.0.0 RC3 allows remote attackers to bypass authentication and access modifier options via a direct request to moderator.php with the action and ismod parameters. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=vuln-dev&m=102221487407632&w=2 - http://www.securityfocus.com/bid/4823 - http://www.iss.net/security_center/static/9160.php
CVE ID: CVE-2002-1831 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T00:02:12.003Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft MSN Messenger Service 1.0 through 4.6 allows remote attackers to cause a denial of service (crash) via an invite request that contains hex-encoded spaces (%20) in the Invitation-Cookie field. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9161.php - http://www.securityfocus.com/bid/4827 - http://online.securityfocus.com/archive/1/274086
CVE ID: CVE-2002-1832 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-08T03:43:32.715Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unknown vulnerability in the "ipopts decode" functionality in Firestorm IDS 0.4.0 through 0.4.2 allows remote attackers to cause a denial of service (crash) via certain IP options. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4871 - http://www.iss.net/security_center/static/9192.php - http://www.scaramanga.co.uk/firestorm/NEWS
CVE ID: CVE-2002-1833 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-08T03:43:33.148Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configurations for DocuTech 6110 and DocuTech 6115 have a default administrative password of (1) "service!" on Solaris 8.0 or (2) "administ" on Windows NT, which allows remote attackers to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4765 - http://www.iss.net/security_center/static/9108.php - http://online.securityfocus.com/archive/1/273089 - http://online.securityfocus.com/archive/1/273078 - http://online.securityfocus.com/archive/1/273079 - htt
ive/1/273089 - http://online.securityfocus.com/archive/1/273078 - http://online.securityfocus.com/archive/1/273079 - http://online.securityfocus.com/archive/1/273029 - http://www.securityfocus.com/bid/4766
CVE ID: CVE-2002-1834 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T19:40:41.856Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Xerox DocuTech 6110 and DocuTech 6115 allows remote attackers to connect to the web server and (1) submit print jobs directly into the "print now" queue or (2) read the scanner job history. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9108.php - http://online.securityfocus.com/archive/1/273078 - http://online.securityfocus.com/archive/1/273029 - http://www.securityfocus.com/bid/4766
CVE ID: CVE-2002-1835 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T03:33:43.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Xerox DocuTech 6110 and DocuTech 6115 running Solaris 8.0 has a large number of unnecessary services enabled such as RPC and sprayd, which could allow remote attackers to obtain access to the device. Additional Analyst Notes: - CVE Program Container: References: - http://totally.righteous.net/jedgar/overview_of_security.pdf - http://www.securityfocus.com/bid/4765 - http://www.iss.net/security_center/static/9108.php - http://online.securityfocus.com/archive/1/273029
CVE ID: CVE-2002-1836 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T20:32:24.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: The default configuration of Xerox DocuTech 6110 and DocuTech 6115 exports certain NFS shares to the world with world writable permissions, which may allow remote attackers to modify sensitive files. Additional Analyst Notes: - CVE Program Container: References: - http://totally.righteous.net/jedgar/overview_of_security.pdf - http://www.securityfocus.com/bid/4765 - http://www.iss.net/security_center/static/9108.php - http://online.securityfocus.com/archive/1/273089 - http://online.securityfocus.com/archive/1/273029
CVE ID: CVE-2002-1837 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-08T03:43:33.464Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getAlbumToDisplay function in idsShared.pm for Image Display System (IDS) 0.81 allows remote attackers to determine the existence of arbitrary directories via ".." sequences in the album parameter, which generates different error messages depending on whether the directory exists or not. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9201.php - http://online.securityfocus.com/archive/1/274433 - http://www.securityfocus.com/bid/4870 - http://ids.sourceforge.net/Cha
ttp://online.securityfocus.com/archive/1/274433 - http://www.securityfocus.com/bid/4870 - http://ids.sourceforge.net/ChangeLog.html
CVE ID: CVE-2002-1838 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T22:03:39.163Z Vendors: n/a Products: n/a Problem Types: n/a Description: Charities.cron 1.0.2 through 1.6.0 allows local users to write to arbitrary files via a symlink attack on temporary files. Additional Analyst Notes: - CVE Program Container: References: - http://www.stevesachs.com/charities.cron_CHANGELOG - http://www.securityfocus.com/bid/4869
CVE ID: CVE-2002-1839 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T03:28:36.709Z Vendors: n/a Products: n/a Problem Types: n/a Description: Trend Micro InterScan VirusWall for Windows NT 3.52 does not record the sender's IP address in the headers for a mail message when it is passed from VirusWall to the MTA, which allows remote attackers to hide the origin of the message. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/9168.php - http://www.securityfocus.com/bid/4830 - http://online.securityfocus.com/archive/1/274144
CVE ID: CVE-2002-1840 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T02:41:09.508Z Vendors: n/a Products: n/a Problem Types: n/a Description: irssi IRC client 0.8.4, when downloaded after 14-March-2002, could contain a backdoor in the configuration file, which allows remote attackers to access the system. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4831 - http://real.irssi.org/?page=backdoor - http://online.securityfocus.com/archive/1/274132 - http://www.iss.net/security_center/static/9176.php
CVE ID: CVE-2002-1841 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-08T03:43:33.477Z Vendors: n/a Products: n/a Problem Types: n/a Description: The document management module in NOLA 1.1.1 and 1.1.2 does not restrict the types of files that are uploaded, which allows remote attackers to upload and execute arbitrary PHP files with extensions such as .php4. Additional Analyst Notes: - CVE Program Container: References: - http://marc.info/?l=vuln-dev&m=102511114021370&w=2 - http://marc.info/?l=vuln-dev&m=102520790718208&w=2 - http://online.securityfocus.com/archive/1/280340 - http://www.iss.net/security_center/static/9438.php - http://www.securityfocus.com/bid/5116
CVE ID: CVE-2002-1842 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T20:58:24.100Z Vendors: n/a Products: n/a Problem Types: n/a Description: Perlbot 1.0 beta allows remote attackers to execute arbitrary commands via shell metacharacters in (1) a word that is being spell checked or (2) an e-mail address. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/296073 - http://www.iss.net/security_center/static/10402.php - http://www.securityfocus.com/bid/5999 - http://www.iss.net/security_center/static/10401.php - http://www.securityfocus.com/bid/5998
CVE ID: CVE-2002-1843 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T00:51:23.868Z Vendors: n/a Products: n/a Problem Types: n/a Description: Perlbot 1.9.2 allows remote attackers to execute arbitrary commands via shell metacharacters in (1) the $text variable in SpelCheck.pm or (2) the $filename variable in HTMLPlog.pm. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10404.php - http://www.securityfocus.com/bid/6009 - http://www.securityfocus.com/bid/6008 - http://www.iss.net/security_center/static/10403.php - http://online.securityfocus.com/archive/1/296134
CVE ID: CVE-2002-1844 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T18:55:58.862Z Vendors: n/a Products: n/a Problem Types: n/a Description: Microsoft Windows Media Player (WMP) 6.3, when installed on Solaris, installs executables with world-writable permissions, which allows local users to delete or modify the executables to gain privileges. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-10/0260.html - http://www.iss.net/security_center/static/10398.php - http://www.securityfocus.com/bid/6003
CVE ID: CVE-2002-1845 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T19:56:01.913Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in index.php in Yet Another Bulletin Board (YaBB) 1.40 and 1.41 allows remote attackers to inject arbitrary web script or HTML via the password (passwrd) parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10406.php - http://www.securityfocus.com/bid/6004 - http://online.securityfocus.com/archive/1/296121
CVE ID: CVE-2002-1846 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T23:01:03.219Z Vendors: n/a Products: n/a Problem Types: n/a Description: Yet Another Bulletin Board (YaBB) 1.40 and 1.41 does not require a user to submit the correct password before changing it to a new password, which allows remote attackers to modify passwords by stealing the cookie of another user, modifying the expiretime setting, and submitting the change in a profile2 action to index.php. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/296121
CVE ID: CVE-2002-1847 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-08T03:43:33.572Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in mplay32.exe of Microsoft Windows Media Player (WMP) 6.3 through 7.1 allows remote attackers to execute arbitrary commands via a long mp3 filename command line argument. NOTE: since the only known attack vector requires command line access, this may not be a vulnerability. Additional Analyst Notes: - CVE Program Container: References: - http://online.securityfocus.com/archive/1/285082 - http://www.securityfocus.com/bid/5357 - http://www.iss.net/security_center/static/9727.php
CVE ID: CVE-2002-1848 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T20:27:48.696Z Vendors: n/a Products: n/a Problem Types: n/a Description: TightVNC before 1.2.4 running on Windows stores unencrypted passwords in the password text control of the WinVNC Properties dialog, which could allow local users to access passwords. Additional Analyst Notes: - CVE Program Container: References: - http://www.tightvnc.com/changelog-win32.html - http://www.securityfocus.com/bid/4835
CVE ID: CVE-2002-1849 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T19:36:40.795Z Vendors: n/a Products: n/a Problem Types: n/a Description: ParaChat Server 4.0 does not log users off if the browser's back button is used, which allows remote attackers to cause a denial of service by repeatedly logging into a chat room, hitting the back button, then logging into the same chat room as a different user, which fills the chat room with invalid users. Additional Analyst Notes: - CVE Program Container: References: - http://archives.neohapsis.com/archives/bugtraq/2002-07/0427.html - http://www.iss.net/security_center/static/9735.php - http://www.securityfocus.com/bid/5370
CVE ID: CVE-2002-1850 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-08T03:43:32.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: mod_cgi in Apache 2.0.39 and 2.0.40 allows local users and possibly remote attackers to cause a denial of service (hang and memory consumption) by causing a CGI script to send a large amount of data to stderr, which results in a read/write deadlock between httpd and the CGI script. Additional Analyst Notes: - CVE Program Container: References: - http://securitytracker.com/id?1007823 - http://seclists.org/bugtraq/2002/Sep/0253.html - http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/generators/mod_cgi.c?r1=1.148.2.7&r2=1.148.
raq/2002/Sep/0253.html - http://cvs.apache.org/viewcvs.cgi/httpd-2.0/modules/generators/mod_cgi.c?r1=1.148.2.7&r2=1.148.2.8 - http://www.securityfocus.com/bid/8725 - http://issues.apache.org/bugzilla/show_bug.cgi?id=10515 - http://www.iss.net/security_center/static/10200.php - http://www.securityfocus.com/bid/5787 - http://marc.info/?l=apache-httpd-dev&m=103291952019514&w=2 - http://issues.apache.org/bugzilla/show_bug.cgi?id=22030
CVE ID: CVE-2002-1851 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T17:17:45.335Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in WS_FTP Pro 7.5 allows remote attackers to execute code on a client system via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/4850 - http://www.nextgenss.com/vna/ips-wsftp.txt - http://www.iss.net/security_center/static/10185.php
CVE ID: CVE-2002-1852 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T02:37:03.672Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Monkey 0.5.0 allows remote attackers to inject arbitrary web script or HTML via (1) the URL or (2) a parameter to test2.pl. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5829 - http://www.iss.net/security_center/static/10229.php - http://archives.neohapsis.com/archives/bugtraq/2002-09/0344.html - http://www.iss.net/security_center/static/10226.php
CVE ID: CVE-2002-1853 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T01:40:34.108Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in MyNewsGroups 0.4 and 0.4.1 allows remote attackers to inject arbitrary web script or HTML via the subject of a newsgroup post, which is not properly handled by (1) myarticles.php, (2) search.php, (3) stats.php, or (4) standard.lib.php. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/7177 - http://www.iss.net/security_center/static/10238.php - http://www.securityfocus.com/bid/5836 - http://www.securityfocus.com/archive/1/293564
CVE ID: CVE-2002-1854 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T16:23:51.875Z Vendors: n/a Products: n/a Problem Types: n/a Description: Rlaj whois CGI script (whois.cgi) 1.0 allows remote attackers to execute arbitrary commands via shell metacharacters in the domain name field. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5113 - http://www.iss.net/security_center/static/9439.php - http://online.securityfocus.com/archive/1/279268
CVE ID: CVE-2002-1855 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T16:43:17.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: Macromedia JRun 3.0 through 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF."). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5119 - http://www.iss.net/security_center/static/9446.php - http://www.macromedia.com/v1/handlers/index.cfm?ID=23164 - http://www.westpoint.ltd.uk/advisories/wp-02-0002.tx
46.php - http://www.macromedia.com/v1/handlers/index.cfm?ID=23164 - http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt - http://online.securityfocus.com/archive/1/279582
CVE ID: CVE-2002-1856 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T22:15:55.385Z Vendors: n/a Products: n/a Problem Types: n/a Description: HP Application Server 8.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF."). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5119 - http://www.iss.net/security_center/static/9446.php - http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt - http://online.securityfocus.com/archive/1/279582
CVE ID: CVE-2002-1857 State: PUBLISHED Published: 2005-06-28T04:00:00 Last Updated: 2024-08-08T03:43:32.653Z Vendors: n/a Products: n/a Problem Types: n/a Description: jo! jo Webserver 1.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF."). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5119 - http://www.iss.net/security_center/static/9446.php - http://online.securityfocus.com/archive/1/279582 - http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt
CVE ID: CVE-2002-1858 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T01:20:51.589Z Vendors: n/a Products: n/a Problem Types: n/a Description: Oracle Oracle9i Application Server 1.0.2.2 and 9.0.2 through 9.0.2.0.1, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF."). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5119 - http://www.iss.net/security_center/static/9446.php - http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt - http://online.se
//www.iss.net/security_center/static/9446.php - http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt - http://online.securityfocus.com/archive/1/279582 - http://otn.oracle.com/deploy/security/pdf/2002alert47rev1.pdf
CVE ID: CVE-2002-1859 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T01:50:45.585Z Vendors: n/a Products: n/a Problem Types: n/a Description: Orion Application Server 1.5.3, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF."). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5119 - http://www.iss.net/security_center/static/9446.php - http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt - http://online.securityfocus.com/archive/1/279582
CVE ID: CVE-2002-1860 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T03:28:28.528Z Vendors: n/a Products: n/a Problem Types: n/a Description: Pramati Server 3.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF."). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5119 - http://www.iss.net/security_center/static/9446.php - http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt - http://online.securityfocus.com/archive/1/279582
CVE ID: CVE-2002-1861 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T23:40:35.233Z Vendors: n/a Products: n/a Problem Types: n/a Description: Sybase Enterprise Application Server 4.0, when running on Windows, allows remote attackers to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF."). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/5119 - http://www.iss.net/security_center/static/9446.php - http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt - http://online.securityfocus.com/archive/1/2795
static/9446.php - http://www.westpoint.ltd.uk/advisories/wp-02-0002.txt - http://online.securityfocus.com/archive/1/279582
CVE ID: CVE-2002-1862 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-17T01:06:31.693Z Vendors: n/a Products: n/a Problem Types: n/a Description: SmartMail Server 2.0 allows remote attackers to cause a denial of service (crash) by sending data and closing the connection before all the data has been sent. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10533.php - http://archives.neohapsis.com/archives/bugtraq/2002-10/0418.html - http://www.securityfocus.com/bid/6074
CVE ID: CVE-2002-1863 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T18:04:28.401Z Vendors: n/a Products: n/a Problem Types: n/a Description: Iomega Network Attached Storage (NAS) A300U, and possibly other models, does not allow the FTP service to be disabled, which allows local users to access home directories via FTP even when access to all shared directories have been disabled. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10530.php - http://archives.neohapsis.com/archives/bugtraq/2002-10/0440.html
CVE ID: CVE-2002-1864 State: PUBLISHED Published: 2005-06-28T04:00:00Z Last Updated: 2024-09-16T22:57:09.851Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Simple Web Server (SWS) 0.0.4 through 0.1.0 allows remote attackers to read arbitrary files via a ".." (dot dot) in an HTTP request. Additional Analyst Notes: - CVE Program Container: References: - http://www.iss.net/security_center/static/10070.php - http://www.securityfocus.com/bid/5662 - http://archives.neohapsis.com/archives/bugtraq/2002-09/0047.html