Vulnerability in Aol Server

CVE-2001-0205

Directory traversal vulnerability in AOLserver 3.2 and earlier allows remote attackers to read arbitrary files by inserting "..." into the requested pathname, a modified .. (dot dot) attack.

EPSS: 0.236 (97.6th percentile) — read the EPSS interpretation.

Affected products

Aol Aol_server — versions 3.2
N/a — versions n/a

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
cve@mitre.org (Exploit, vdb-entry, x_refsource_BID, Vendor Advisory)