Vulnerability in Alchemy Lab Eye
CVE-2001-0871
Directory traversal vulnerability in HTTP server for Alchemy Eye and Alchemy Network Monitor allows remote attackers to execute arbitrary commands via an HTTP request containing (1) a .. in versions 2.0 through 2.6.18, or (2) a DOS device name followed by a .. in versions 2.6.19 through 3.0.10.
EPSS: 0.030 (85.8th percentile) — read the EPSS interpretation.
Affected products
- Alchemy_lab Alchemy_eye — versions 2.0, 2.1, 2.2
- Dek_software Alchemy_network_monitor
- N/a — versions n/a
References
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_XF)
- cve@mitre.org (vdb-entry, x_refsource_BID, Vendor Advisory)
- cve@mitre.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)