CVE
- Id
- 5520
- CVE No.
- CVE-2002-1133
- Status
- Candidate
- Description
- Encoded directory traversal vulnerability in Dino"s web server 2.1 allows remote attackers to read arbitrary files via ".." (dot dot) sequences with URL-encoded (1) "/" (%2f") or (2) "" (%5c) characters.
- Phase
- Proposed (20030317)
- Votes
- ACCEPT(2) Armstrong, Cole | NOOP(3) Balinsky, Cox, Wall
- Comments
- Balinsky> No confirmation available. Software apparently no longer available.