CVE Details for CVE: CVE-2001-0555
Summary
ScreamingMedia SITEWare versions 2.5 through 3.1 allows a remote attacker to read world-readable files via a .. (dot dot) attack through (1) the SITEWare Editor's Desktop or (2) the template parameter in SWEditServlet.
| Timestamps | |
|---|---|
| Last major update | 11-07-2017 - 01:29 |
| Published | 14-08-2001 - 04:00 |
| Last modified | 11-07-2017 - 01:29 |
References
- http://archives.neohapsis.com/archives/bugtraq/2001-06/0166.html
- http://archives.neohapsis.com/archives/bugtraq/2001-06/0165.html
- http://www01.screamingmedia.com/en/security/sms1001.php
- http://www.kb.cert.org/vuls/id/795707
- http://www.securityfocus.com/bid/2869
- http://www.osvdb.org/13887
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6689
CWE
CVSS
Base
10.0
Impact
10.0
Exploitability
10.0
Access
| Vector | Complexity | Authentication |
|---|---|---|
| NETWORK | LOW | NONE |
Impact
| Confidentiality | Integrity | Availability |
|---|---|---|
| COMPLETE | COMPLETE | COMPLETE |
CVSS3
None
VIA4 references
cvss-vector
via4
refmap
via4
| bid | 2869 |
| bugtraq | |
| cert-vn | VU#795707 |
| confirm | http://www01.screamingmedia.com/en/security/sms1001.php |
| osvdb | 13887 |
| xf | siteware-dot-file-retrieval(6689) |