Vulnerability in Robtex Viking Server

CVE-2001-0674

Directory traversal vulnerability in RobTex Viking Web server before 1.07-381 allows remote attackers to read arbitrary files via a hexadecimal encoded dot-dot attack (eg. http://www.server.com/%2e%2e/%2e%2e) in an HTTP URL request.

EPSS: 0.023 (81.8th percentile) — read the EPSS interpretation.

Affected products

Robtex Viking_server — versions 1.0.4, 1.0.6, 1.0.7
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ, Patch)
cve@mitre.org (x_refsource_CONFIRM, Patch, Vendor Advisory)